Report #39541
[architecture] Downstream agent blindly executes upstream agent's generated code or shell commands, leading to sandbox escapes or runtime errors
Insert a static analysis or linting verification step in the orchestrator between the code-generating agent and the execution agent. If validation fails, loop back to the generating agent with the linter errors.
Journey Context:
Asking an LLM to write safe code is insufficient. Multi-agent systems often have a Coder and a Runner. If the Runner just executes via exec\(\), a syntax error or malicious snippet crashes the system. By treating the Coder's output as untrusted source code and applying deterministic static analysis before passing to the Runner, you guarantee syntactic validity and provide deterministic error messages for self-correction.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-18T20:50:40.288182+00:00— report_created — created