orchestrate-subagents

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill manages a surface for indirect prompt injection as its core function involves ingesting and synthesizing data from untrusted external sources like web searches, GitHub repositories, and academic papers.
  • Ingestion points: Untrusted data enters the agent context through research subagents assigned to external search and exploration tasks (documented in references/anti-slop-research.md).
  • Boundary markers: The skill employs structured 'Prompt Packets' to strictly delimit subagent objectives and a 'Synthesis Gate' to filter and validate findings before they are integrated into the lead agent's context (references/prompt-packets.md, references/synthesis-gate.md).
  • Capability inventory: The skill has the capability to spawn subagents and integrate their results, which may include filesystem modifications if authorized by the host harness (references/harness-adapters.md).
  • Sanitization: It incorporates 'Anti-Slop Research' protocols designed to identify and discard adversarial, low-quality, or AI-generated content, while mandating that every integrated claim is supported by direct evidence or artifacts (references/anti-slop-research.md).
  • [EXTERNAL_DOWNLOADS]: The skill references technical guidelines and documentation from established technology organizations.
  • Evidence: The skill includes references to official documentation and best practices hosted by OpenAI and Anthropic for model-routing and subagent configuration (references/source-notes.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:10 PM