team-ui
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the load-time execution syntax (
!bash) to run a shell script (yaml-helper.sh) located in the project's local directory. This is used to resolve configuration values such asreview_modeandteam.sizebefore the agent begins processing instructions. - [PROMPT_INJECTION]: The instructions explicitly direct the agent to bypass the standard 'Collaboration Protocol', which requires user approval before every file write. It defines a 'bounded exception' where sub-agents are permitted to write new artifacts to specific directories (
production/,docs/,tests/) without individual prompts, provided the overall phase is gated by anAskUserQuestioncheck. - [COMMAND_EXECUTION]: The skill performs shell command execution through two vectors: the load-time configuration resolution and the
Bashtool usage defined in the frontmatter. These commands are restricted by the platform to a specific local script (yaml-helper.sh) and designated sub-commands.
Audit Metadata