acos-meta
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents an auto-routing mechanism that processes user requests to activate specific agents and skills based on keywords.
- Ingestion points: User requests are processed by the routing logic and the
skill-activation-prompt.shlifecycle hook. - Boundary markers: The architectural overview does not specify the use of delimiters or instructions to ignore embedded prompts during routing.
- Capability inventory: The documented system can invoke sub-agents via the
Tasktool, read local audit logs, and execute monitoring scripts. - Sanitization: Input validation logic is not explicitly detailed in the meta-level architectural description.
- [EXTERNAL_DOWNLOADS]: The documentation references an external GitHub repository for architectural patterns (
github.com/frankxai/knowledge-work-plugins). This repository belongs to the skill's author and is cited as the source for design principles like connector agnosticism and progressive disclosure.
Audit Metadata