coliseum-dispatch
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates an indirect prompt injection surface by ingesting data from
phase-2-assignments.mdand interpolating it into prompts for theAgenttool. * Ingestion points:phase-2-assignments.md(referenced in Step 1 and Step 3). * Boundary markers: The skill instructions require prompts to be 'fully self-contained' and include a 'handoff block', but it lacks explicit technical delimiters (such as XML tags or unique sequence markers) to wrap the untrusted content. * Capability inventory: The skill has access toRead,Write,Edit,Bash,Glob,Grep, andAgenttools. * Sanitization: The process implements a mandatory 'no-pingpong gate' using apingpong-detectoragent to identify and block problematic or recursive assignments before they are dispatched.
Audit Metadata