parallel-subagents
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill's primary function is to ingest and synthesize information from external web research and subagent outputs, creating an indirect prompt injection surface where malicious data could attempt to influence the agent's behavior.
- Ingestion points: External data enters the context through research subagents and codebase exploration tasks described in
SKILL.mdandreferences/delegation-patterns.md. - Boundary markers: The skill utilizes structured 'prompt packets' defined in
references/prompt-packets.mdto define scopes for sub-tasks. - Capability inventory: The orchestrator has the capability to spawn sub-processes and tasks that can modify files or access the network, as outlined in
references/harness-adapters.md. - Sanitization: The
references/synthesis-gate.mdprovides a manual verification framework for the agent to validate claims against direct evidence before finalizing outputs. - [COMMAND_EXECUTION]: The instructions direct the agent to utilize native platform tools to spawn and manage sub-agents or tasks.
- Evidence:
references/harness-adapters.mdcontains logic for interacting with various agent harnesses (such as Codex and Claude Code) to perform delegation.
Audit Metadata