council-of-five
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves taking user-provided text and interpolating it into prompts for five parallel subagents, which creates a vulnerability to indirect prompt injection.
- Ingestion points: The
[problem description]and[paste current solution]placeholders in the 'Prompt Template for Each Agent' section ofSKILL.mdare the points where untrusted data enters the agent context. - Boundary markers: The skill does not implement boundary markers or delimiters (such as triple quotes or XML tags) to separate user data from the instructions, nor does it provide warnings to the subagents to ignore instructions embedded within that data.
- Capability inventory: The skill spawns multiple subagents that have the capability to perform analysis and potentially execute tools depending on the environment configuration.
- Sanitization: There is no evidence of input validation, escaping, or filtering of the user-provided content before it is processed by the subagents.
Audit Metadata