conductor
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill performs standard project management tasks by reading and writing to local documentation files within the project repository.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project documentation files to coordinate development cycles. Ingestion points: README.md, ARCHITECTURE.md, ROADMAP.md, .agent/rules/, and docs/dev/. Boundary markers: Absent. Capability inventory: Documentation file reads and writes to ROADMAP.md, TODO.md, and Architecture Decision Records (ADRs). Sanitization: Absent. The skill lacks high-risk capabilities such as network access or arbitrary command execution.
Audit Metadata