task-model-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill contains only markdown instructions and templates. No executable code, scripts, or binaries are included.
- [NO_CODE]: There are no implementation files provided, only guidelines for the parent agent to follow when using existing tools.
- [INDIRECT_PROMPT_INJECTION]: While the skill orchestrates data flow between agents (a potential attack surface), it explicitly mandates the use of external verification methods such as test logs, static analysis, and human review gates to validate sub-agent outputs, effectively mitigating risks of following malicious sub-agent instructions.
- [PRIVILEGE_ESCALATION]: The instructions explicitly state that activating the skill does not grant additional permissions and that sub-agents should not be allowed to expand their scope or recursively delegate without authorization.
Audit Metadata