conductor-implement
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and executes instructions derived from potentially untrusted project files (Specifications and Implementation Plans).
- Ingestion points: The agent reads the Tracks Registry (
conductor/tracks.md), individual track indices, track Specifications, and Implementation Plans to determine its actions. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when interpolating the content of these files into the agent's context.
- Capability inventory: The skill has the capability to execute terminal commands, modify core project documentation (Product Definition, Tech Stack, Product Guidelines), and perform Git commits.
- Sanitization: There is no mention of sanitizing, escaping, or validating the content of the specifications or plans before they are used to guide the implementation process.
Audit Metadata