checkpoint
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
references/mcp-tool-reference.mdfile suggests installing optional companion tools usingnpx create-exarchos, which fetches package data from the npm registry. - [COMMAND_EXECUTION]: The documentation mentions using the
npxcommand to install vendor-provided companion tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes workflow metadata and state information that can include externally-influenced data, such as pull request feedback and URLs.
- Ingestion points: Workflow state and event data are retrieved using
exarchos_workflow getandexarchos_view pipelineas described inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are defined for the processed state data.
- Capability inventory: The skill utilizes the
exarchos_workflow,exarchos_event, andexarchos_orchestratetools for state mutation, event recording, and task management. - Sanitization: No explicit sanitization or validation logic is mentioned for external feedback or URLs stored within the workflow state.
Audit Metadata