team-builder
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
claude agentsCLI command at runtime to discover a list of available agents. This is a platform-native command used for inventory, but it involves direct shell invocation. - [INDIRECT_PROMPT_INJECTION]: The skill reads external markdown files from local directories and interpolates their contents directly into subagent prompts without sanitization.
- Ingestion points: Markdown files located in
./agents/**/*.mdand~/.claude/agents/**/*.md. - Boundary markers: None. The file content is interpolated as
{agent file content}directly into the prompt provided to the Agent tool. - Capability inventory: The skill utilizes the
Agenttool to spawn subagents, which may have their own sets of capabilities (file access, code execution). - Sanitization: No validation, escaping, or sanitization is performed on the content read from the agent files before it is passed to the LLM.
- [DYNAMIC_EXECUTION]: The skill dynamically generates instructions for the
Agenttool by concatenating file content with user task descriptions at runtime (prompt: "{agent file content}\n\nTask: {task description}").
Audit Metadata