team-ui

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the load-time execution syntax (!bash) to run a shell script (yaml-helper.sh) located in the project's local directory. This is used to resolve configuration values such as review_mode and team.size before the agent begins processing instructions.
  • [PROMPT_INJECTION]: The instructions explicitly direct the agent to bypass the standard 'Collaboration Protocol', which requires user approval before every file write. It defines a 'bounded exception' where sub-agents are permitted to write new artifacts to specific directories (production/, docs/, tests/) without individual prompts, provided the overall phase is gated by an AskUserQuestion check.
  • [COMMAND_EXECUTION]: The skill performs shell command execution through two vectors: the load-time configuration resolution and the Bash tool usage defined in the frontmatter. These commands are restricted by the platform to a specific local script (yaml-helper.sh) and designated sub-commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:03 PM