contention-layer
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests outputs from conflicting agents and research tracks to generate new skill templates. While this creates a surface for potentially malicious instructions to be included in generated drafts, the process is mitigated by a mandatory human confirmation gate ('I will place this draft at {path}. Shall I proceed?') before any files are written to the system. Ingestion points: conflict data from skills/agents/research tracks (Step 1). Boundary markers: absent in prompt interpolation. Capability inventory: uses the
Writetool to generateSKILL.mdskeletons (Step 4). Sanitization: absent.- [COMMAND_EXECUTION]: The skill utilizesBashandGrepfor analyzing conflict points within research tracks and skill outputs. This behavior is consistent with the skill's primary purpose of text analysis and metadata harvesting.
Audit Metadata