team-ultra-analyze

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill's logic and instructions align with its stated purpose of codebase analysis. No malicious code or exfiltration patterns were detected.\n- [COMMAND_EXECUTION]: The skill employs Bash to execute maestro CLI commands for project exploration and diagnostic tasks. This is restricted to the analysis workflow as seen in roles/explorer/role.md, roles/analyst/role.md, and roles/discussant/role.md.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests untrusted codebase data.\n
  • Ingestion points: Codebase exploration via maestro explore and maestro delegate (in roles/explorer/role.md, roles/analyst/role.md, and roles/discussant/role.md).\n
  • Boundary markers: None explicitly defined for ingested content.\n
  • Capability inventory: Uses Bash, Agent spawning, and Write tools across multiple scripts.\n
  • Sanitization: No content sanitization or escaping is performed before interpolation into agent prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 06:13 AM
Security Audit — agent-trust-hub — team-ultra-analyze