team-coordination
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill templates define workflows where agents read data from external files, such as specification documents (e.g.,
specs/{{TICKET_PREFIX}}-XXX-spec.md). This creates a vulnerability surface for indirect prompt injection, where an attacker could embed malicious instructions in those files to influence agent behavior. - Ingestion points: Specification files and pattern libraries are identified as data sources for sub-agents.
- Boundary markers: The templates do not include delimiters or specific instructions for agents to ignore embedded commands within the ingested content.
- Capability inventory: The skill enables the creation and management of sub-agents with delegated tasks.
- Sanitization: No sanitization or verification of the external file content is described in the provided patterns.
Audit Metadata