herdr
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent ingests terminal output to influence its next actions, creating an indirect prompt injection surface. (1) Ingestion points:
herdr pane readandherdr agent readinCLI-REFERENCE.md. (2) Boundary markers: The instructions lack requirements for explicit delimiters or instructions to ignore embedded commands in ingested output. (3) Capability inventory: The agent has access toherdr pane runandherdr agent promptfor executing commands and instructing other agents. (4) Sanitization: No data filtering or sanitization is specified. - [COMMAND_EXECUTION]: The
capture-cli-help.pyscript usessubprocess.runto executeherdrCLI commands for help text discovery. - [EXTERNAL_DOWNLOADS]: The
MAINTENANCE.mdfile provides instructions to fetch documentation and metadata from theherdrdev/herdrrepository using the GitHub CLI.
Audit Metadata