team-ultra-analyze
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's logic and instructions align with its stated purpose of codebase analysis. No malicious code or exfiltration patterns were detected.\n- [COMMAND_EXECUTION]: The skill employs Bash to execute maestro CLI commands for project exploration and diagnostic tasks. This is restricted to the analysis workflow as seen in roles/explorer/role.md, roles/analyst/role.md, and roles/discussant/role.md.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests untrusted codebase data.\n
- Ingestion points: Codebase exploration via maestro explore and maestro delegate (in roles/explorer/role.md, roles/analyst/role.md, and roles/discussant/role.md).\n
- Boundary markers: None explicitly defined for ingested content.\n
- Capability inventory: Uses Bash, Agent spawning, and Write tools across multiple scripts.\n
- Sanitization: No content sanitization or escaping is performed before interpolation into agent prompts.
Audit Metadata