pseo-orchestrate
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected in the instructions. The skill accurately reflects its stated purpose of coordinating other tools.
- [NO_CODE]: This skill consists entirely of markdown instructions and metadata, with no embedded scripts or executable commands. It relies on the agent to invoke other skills in a specific sequence.
- [INDIRECT_PROMPT_INJECTION]: The orchestration logic relies on data ingested from previous phases (discovery and audit) to inform transitions. While this defines an attack surface where malicious data in a project's codebase could influence the agent's implementation path, the risk is inherent to the task of programmatic SEO and code analysis.
- Ingestion points: User confirmation steps and output reports from
pseo-discoveryandpseo-audit. - Boundary markers: Not defined in this orchestration layer.
- Capability inventory:
Bash,Write,Edit,Read,Glob,Greptools allowed in frontmatter. - Sanitization: Not performed within this orchestration file; assumes individual skills handle their own data validation.
Audit Metadata