parallel-agents
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to ingest and act upon data from the codebase's history and internal documentation, creating an attack surface for instructions embedded in data.
- Ingestion points: The agent is instructed to analyze
git logoutput inreferences/hotspot-audit.mdand to read and prune repository documentation such asAGENTS.mdandCLAUDE.mdas described inreferences/doc-gardening.md. - Boundary markers: No explicit delimiters or instructions are provided to ensure the agent ignores or sanitizes malicious instructions that might be embedded in the repository content.
- Capability inventory: The skill assumes the agent has the ability to execute shell commands (
git log) and modify files throughout the repository to reorganize the codebase. - Sanitization: There is no requirement for sanitization or validation of the ingested repository data mentioned in the instructions.
- [COMMAND_EXECUTION]: The skill provides a shell command pipeline for the agent to execute when auditing the repository for churn hotspots.
- Evidence:
git log --since="3 months ago" --name-only --pretty=format: | grep -v '^$' | sort | uniq -c | sort -rn | head -25inreferences/hotspot-audit.md.
Audit Metadata