workflow-parallel-agents
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard development workflows for parallelizing tasks using Git worktrees and cloud-based agents. No suspicious command execution, persistence mechanisms, or obfuscated code were detected.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The instructions suggest sharing
.envfiles across local git worktrees (e.g., via symlinking). This is a standard practice for maintaining local development environments and does not involve exfiltration to external or untrusted entities. - [EXTERNAL_DOWNLOADS]: The skill references
cursor.comand Slack for notifications and cloud agent management. These are well-known services associated with the agent's operating environment and do not constitute a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of delegation prompts for sub-agents. While this introduces a surface where instructions could be passed to other agents, the skill acts as a methodology guide rather than an automated pipeline that ingests untrusted third-party data. Standard platform boundaries apply.
Audit Metadata