zeno-executing-tasks
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Clones and forks repositories from the vendor's GitHub organization (github.com/zenon-red/*) to manage codebases.- [COMMAND_EXECUTION]: Executes shell commands for workspace setup, repository synchronization, and building/testing projects via 'cargo', 'deno', 'bun', and 'npm'.- [COMMAND_EXECUTION]: Instructs the agent to execute test commands that are retrieved dynamically from task descriptions or other reference files.- [PROMPT_INJECTION]: Ingests project directives and task completion criteria from external sources (Nexus tasks and the 'probe' CLI tool), creating a surface for indirect prompt injection. Ingestion points: Nexus task descriptions and project directives. Boundary markers: Absent. Capability inventory: Git operations, build tool execution (cargo/deno/bun/npm), and file writes. Sanitization: Not specified.
Audit Metadata