split-task

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists exclusively of text-based instructions and formatting templates intended to guide the agent's reasoning process for task decomposition. It does not include executable code, script files, or automation commands.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided task descriptions (parent tasks) to generate structured sub-task contracts.
  • Ingestion points: Processes user requests within the chat context as defined in SKILL.md (Capture the parent in chat).
  • Boundary markers: Utilizes Markdown headers (e.g., # Parent, ### Slices) to delineate different sections of the structured output.
  • Capability inventory: The skill explicitly disables model invocation (disable-model-invocation: true) and does not perform file-system writes, network operations, or subprocess executions.
  • Sanitization: While no specific sanitization logic is present for user-provided task titles, the skill's primary function is formatting for organizational purposes rather than execution, significantly limiting the impact of any injected instructions.
  • [EXTERNAL_DOWNLOADS]: The file contains relative references to internal documentation (e.g., ../pack-shared/standards.md, ../pack-shared/asking.md). These are local file path references within the expected repository structure and do not represent external network downloads or unverifiable dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 06:25 PM