orchestrator-task-loop
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run local scripts for lifecycle hooks and task verification, such as./scripts/board-drained.sh. These scripts are used to evaluate the state of the task board and determine if the loop should continue. - [INDIRECT_PROMPT_INJECTION]: The orchestrator reads and acts upon task states and feedback stored in a shared task list file, which is authored and updated by multiple agents in the team.
- Ingestion points: The shared task list file described in
references/agent-teams.mdis the primary source of truth for the loop. - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within task descriptions or feedback stored in the shared file.
- Capability inventory: The lead agent is configured with powerful tools including
Bash,Write,Edit,Agent, andTaskin theSKILL.mdfrontmatter. - Sanitization: The skill uses
jq --argfor safe JSON construction in its shell scripts, but does not specify sanitization for the natural language feedback processed by the agent when evaluating task completion gates.
Audit Metadata