team-lead
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run an initialization script (cli init) located within the plugin's own directory (${CLAUDE_PLUGIN_ROOT}/scripts/).
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface by ingesting external project documentation without explicit boundaries or sanitization.
- Ingestion points: Reads CLAUDE.md, AGENTS.md, and project configuration files (.claude/project.json) from the current working directory.
- Boundary markers: None; the skill does not instruct the agent to ignore or delimit instructions found within these files.
- Capability inventory: The skill can spawn additional agents, execute local scripts, and manage task coordination across the team.
- Sanitization: The skill does not perform sanitization or validation of the content read from markdown files.
Audit Metadata