pentaphase-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires powerful capabilities including
Bash,Write, andEdit. These are used to create the project directory structure and facilitate the execution of phase-specific logic via other agents. - [INDIRECT_PROMPT_INJECTION]: The protocol captures verbatim user input during Phase 0 and saves it to a persistent file (
substrate-context.md) which serves as the primary context for all subsequent phase-skills. - Ingestion points: User answers to five context questions in Phase 0 (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when writing user data to the context file.
- Capability inventory: The orchestrator and referenced phase-skills have access to
Bash,Write,Edit, andGrep(SKILL.md). - Sanitization: There is no evidence of validation, filtering, or escaping for the user-supplied text before it is stored and consumed by downstream skills.
Audit Metadata