mc-orchestration

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill uses natural instructional language to guide the agent in orchestration tasks. No attempts to override safety filters, extract system prompts, or bypass ethical guidelines were detected.
  • [DATA_EXFILTRATION]: No network operations (e.g., curl, wget, fetch) or access to sensitive file paths (e.g., .ssh, .aws, .env) are present in the documentation.
  • [OBFUSCATION]: No hidden content, Base64 encoding, zero-width characters, or homoglyph attacks were found within the text.
  • [REMOTE_CODE_EXECUTION]: The skill does not include any scripts, package manifests (package.json, requirements.txt), or commands to download and execute external code.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process musical specification data (ARR-SPEC), creating a theoretical ingestion point for untrusted data. However, as the skill possesses no capabilities for shell execution, network access, or file system modification, this surface is not exploitable.
  • [DYNAMIC_CONTEXT_INJECTION]: No load-time shell execution patterns (!command) were found in the SKILL.md frontmatter or body.
  • [NO_CODE]: The entire skill consists of Markdown reference files providing information and guidance to the agent, with no active code components.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 02:38 PM