orchestrate-meta
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill employs dynamic context injection to execute benign shell commands, such as
findandgit log, for project state discovery when the skill is loaded. - [COMMAND_EXECUTION]: It invokes a local script
manifest-sync.tsviabunto synchronize the project manifest, which is a standard administrative task for this skill set. - [PROMPT_INJECTION]: The skill processes various local project files to classify user intent, creating an indirect prompt injection surface. Evidence: (1) Ingestion points: Files in research/, brand/, architecture/, and .agents/ directories; (2) Boundary markers: Absent; (3) Capability inventory: Shell access (Bash) and file system access (Read, Grep, Glob); (4) Sanitization: Absent.
- [SAFE]: The orchestrator reads multiple project directories to build a state map, which is necessary for its core function of routing tasks based on existing progress.
Audit Metadata