context-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a coordination pattern where a lead agent synthesizes findings from multiple subagents (documented in
modules/findings-format.mdandmodules/subagent-coordination.md). This creates an attack surface for indirect prompt injection via the findings files processed by the parent agent. - Ingestion points: The lead agent is instructed to read summaries from
.coordination/agents/*.findings.mdfiles. - Boundary markers: While using structured Markdown, the skill does not explicitly use markers to ignore instructions within the processed text.
- Capability inventory: Includes
bashhooks,Tasktool for subagent spawning, and local file writing. - Sanitization: Input filtering using
jqis present in hooks, but no specific sanitization is defined for the synthesis of findings content. - [COMMAND_EXECUTION]: The
SKILL.mdfrontmatter defines several hooks (PreToolUse,PostToolUse,Stop) that executebashcommands to log context usage metrics and tool activity to a local file (/tmp/skill-audit.log).
Audit Metadata