Ir al contenido principal
Este contenido aún no está disponible en tu idioma y se muestra en inglés.

Agent Call

Plugin
75

call another agent such as cursor-agent, codex, claude to perform a task.

Resumen IA

This plugin provides three skills: `call-claude`, `call-codex`, and `call-cursor-agent`, each designed to invoke a specific AI agent's CLI with a user-provided task description. It assumes the target CLIs are installed and configured on the user's system.

Practical Utility

  • info:Unique selling propositionThe extension appears to be a thin wrapper around CLI commands for different agents, with limited added value beyond direct invocation.
  • warning:Production readinessThe skills are basic wrappers and lack comprehensive error handling or configuration options, which limits their production readiness.

Documentation

  • warning:Configuration & parameter referenceThe SKILL.md files mention parameters like '{task_description}' and mention timeout settings but do not document default values or explicit precedence orders.

Security

  • info:Secret ManagementThe SKILL.md files show placeholder commands that use CLI arguments which could potentially expose secrets if not handled carefully by the underlying CLIs.
  • warning:InjectionThe `codex exec --sandbox danger-full-access` command and the `claude -p --dangerously-skip-permissions` command appear to bypass security sandboxing without explicit justification or warnings, posing an injection risk.
  • warning:Transitive Supply-Chain GrenadesThe use of commands like `which` and direct CLI execution without clear sandboxing or input validation could allow for transitive supply-chain attacks if the underlying tools are compromised.
  • warning:Sandbox IsolationThe `codex exec --sandbox danger-full-access` command and the `claude -p --dangerously-skip-permissions` command explicitly bypass sandbox protections, indicating a potential for unintended side effects or security risks.
  • warning:Data ExfiltrationThe commands used (e.g., `claude -p`, `codex exec --sandbox danger-full-access`) might allow for unredacted data exfiltration if the underlying tools are not properly configured or if the '{task_description}' includes sensitive information.
  • warning:Unguarded Destructive OperationsThe 'codex exec --sandbox danger-full-access' and 'claude -p --dangerously-skip-permissions' commands suggest potentially destructive operations are not adequately guarded or confirmed by default.

Hooks

  • warning:Opaque code executionThe skills rely on executing external CLI commands (`claude`, `codex`, `cursor-agent`), which are opaque code execution mechanisms if their internal workings are not fully understood or trusted.

Portability

  • warning:Structural AssumptionThe skills assume the presence and correct installation of external CLIs ('claude', 'codex', 'cursor-agent') and that they are in the system's PATH, which might not be true for all user environments.
  • warning:Runtime stabilityThe skills assume the availability and specific command-line interfaces of 'claude', 'codex', and 'cursor-agent', which may not be present or configured identically on all systems, potentially leading to silent failures or crashes.

Code Execution

  • warning:ValidationThe '{task_description}' parameter is passed directly to CLI commands without explicit validation or sanitization within the skill scripts, potentially allowing for injection if the input is malicious.
  • warning:Error HandlingThe skills check for the existence of the CLIs but do not implement robust error handling for cases where the CLI is not found, or if the CLI commands themselves fail, potentially leading to silent failures or opaque errors.

Compliance

  • warning:GDPRThe plugin directly invokes external agents with user-provided task descriptions, which could contain personal data. Without explicit sanitization or user consent prompts, this could lead to unintended data submission to third parties.

Invocation

  • warning:Name collisionsThe skill names ('call-claude', 'call-codex', 'call-cursor-agent') could potentially collide with Claude Code built-in commands or other installed skills if not properly namespaced by the router.

Instalación

Primero, añade el marketplace

/plugin marketplace add dotneet/claude-code-marketplace
/plugin install agent-call@dotneet-marketplace
4 months ago
0 stars
MIT
Actualizado el 2 days ago
Ver código fuente