Skip to main content

archon

Archon is an autonomous campaign agent that manages multi-session projects by decomposing tasks, delegating to sub-agents, and maintaining state.

Install this skill

or
40/100

Security score

The archon skill was audited on Jun 12, 2026 and we found 4 security issues across 1 threat category, including 4 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 64

Template literal with variable interpolation in command context

SourceSKILL.md
642. Ask (single sentence): `This is multi-session work (~{N} sessions, ~${total}). Run continuously? [y/n]`
high line 68

Template literal with variable interpolation in command context

SourceSKILL.md
68- Log `daemon-start` to telemetry
high line 229

Template literal with variable interpolation in command context

SourceSKILL.md
229- **All 3 validator retries exhausted**: Mark phase `partial`, log `validator_halt` with the failed conditions, advance to next phase. Never park the campaign solely due to validator failure.
high line 260

Template literal with variable interpolation in command context

SourceSKILL.md
260Read trust level from `harness.json` (`readTrustLevel()` in harness-health-util.js):
Scanned on Jun 12, 2026
View Security Dashboard
Installation guide →