parallel-execution
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the bash interpreter to execute a local script located at
.opencode/skills/task-management/router.shfor managing task routing and monitoring execution status. - [INDIRECT_PROMPT_INJECTION]: The instructions create an attack surface by directing subagents to read and implement logic from local files which could contain untrusted data. * Ingestion points: File content from
.tmp/tasks/feature/subtask_01.jsonand markdown files within.opencode/agent/subagents/are read in Step 2 and the Example section. * Boundary markers: The prompts provided to theCoderAgentlack delimiters or explicit instructions to treat file content as data rather than instructions. * Capability inventory: The agent possesses capabilities to execute shell scripts and perform file system operations through theCoderAgentsubagent. * Sanitization: No content validation or sanitization processes are defined for the data ingested from the local file system.
Audit Metadata