team-audio
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust human-in-the-loop pattern, using the
AskUserQuestiontool to require user approval at every phase transition before proceeding. - [SAFE]: File operations and complex tasks are delegated to subagents using the
Tasktool, following a structured workflow that limits the orchestrator's direct execution of high-risk commands. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by ingesting project documentation and user arguments to parameterize subagents. Ingestion points: Feature arguments,
design/gdd/files,sound-bible.md, andtechnical-preferences.md. Boundary markers: None explicitly defined in the orchestration logic. Capability inventory: The orchestrator and its subagents have access toBash,Write,Edit, andTasktools. Sanitization: No input validation or sanitization is performed on the ingested project data. This risk is mitigated by the mandatory user approval gates.
Audit Metadata