superconductor
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing the
scCLI tool for orchestration, layout management, and worktree operations. It utilizesjqto construct temporary JSONL files for command input, which is a safe practice that prevents shell injection issues when handling complex prompts. - [EXTERNAL_DOWNLOADS]: The skill documentation references a dependency on the Superconductor application and its
scCLI tool. It does not perform automated installation or downloading of these external components, relying on the host environment. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection as it ingests and processes data from external sources, including other agent outputs and in-app review threads.
- Ingestion points: Commands such as
sc agent read,sc team status, andsc worktree review-getinSKILL.mdand reference files read data into the agent's context. - Boundary markers: Explicit "ignore instructions" delimiters are not mandated, but the skill instructs the agent to verify all results independently using Git and tests, and requires human intent for destructive mutations.
- Capability inventory: The skill uses subprocess calls for
sccommands, including task dispatch, worktree management, and agent interaction. - Sanitization: The skill uses
jqto escape content when creating launch input files, providing a layer of sanitization for prompt data.
Audit Metadata