security-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as an orchestration layer that ingests data from external security components, presenting a theoretical surface for indirect prompt injection if those components process malicious content.
- Ingestion points: The skill reads and acts upon
security-report.md,trust-score.md, andincident-report.md(found inSKILL.md). - Boundary markers: No explicit delimiter or 'ignore' instructions are defined within the orchestration logic for these input files.
- Capability inventory: The skill manages the lifecycle and configuration of sub-skills and performs file writes to
security-audit-trail.log(found inSKILL.md). - Sanitization: No explicit sanitization or validation of the ingested report content is documented at this orchestration level.
- [SAFE]: The skill focuses on security management and enforcement. It includes logic to block production deployments if security audits fail and mandates incident response sequences that cannot be skipped, aligning with security best practices.
Audit Metadata