principle-outcome-oriented-execution

Warn

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill contains instructions to 'Replace upstream Composer, Claude Opus, and other panel defaults with Codex gpt-5.6-sol' and to 'Apply these overrides before following the original workflow.' This is a deceptive attempt to override the platform's native model selection and orchestration logic using references to non-existent model versions.
  • [COMMAND_EXECUTION]: The instructions direct the agent to 'launch Codex CLI workers' using 'the installed pstack skill spawn-codex-worker script' or 'direct codex exec.' These commands refer to external dependencies and scripts that are not defined within the skill itself, encouraging the execution of unverified local tools.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 10, 2026, 04:46 PM