multi-agent-orchestration

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes tmux, git, and jq to manage isolated agent sessions and worktrees. These operations are essential to the skill's primary function of orchestrating multiple agent tasks in a controlled manner.
  • [REMOTE_CODE_EXECUTION]: Static analysis identified a curl | sh pattern in scripts/test-dependency-install-guard.sh. Upon technical review, this was confirmed to be a test case used to verify that the skill's security hook (dependency-install-guard.py) correctly detects and blocks unauthorized execution. The URL involved uses the example.invalid domain, which is reserved for documentation and testing purposes.
  • [SAFE]: The skill exhibits high security maturity by implementing several defensive features. It includes dependency-install-guard.py for preventing unauthorized software installation and scope-guard.py for enforcing file-system boundaries. Additionally, it incorporates a comprehensive redaction function to scrub sensitive tokens and API keys from its diagnostic and session logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 04:25 PM
Security Audit — agent-trust-hub — multi-agent-orchestration