delegate
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes the
exarchos_orchestratetool to retrieve 'runbooks'—sequences of execution steps—at runtime (e.g., thetask-completionandagent-teams-sagarunbooks). The orchestrator is then directed to execute these returned steps, representing dynamic script generation and execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of implementation plans and review reports, which are interpolated into subagent prompts.
- Ingestion points: External implementation plans and review results are read via
exarchos_workflow getand processed inSKILL.mdandreferences/fix-mode.md. - Boundary markers: While the skill uses markdown headers to separate task descriptions, it does not implement strict sanitization or escaping of the interpolated plan content.
- Capability inventory: The skill possesses the capability to spawn subagents (
Taskprimitive), execute shell commands (git,npm,testrunners), and write to the filesystem. - Sanitization: The instructions do not specify any sanitization, filtering, or validation of external content before it is placed into subagent or fixer prompts.
- [COMMAND_EXECUTION]: The skill orchestrates environment setup and task execution through numerous shell commands, including
git worktreemanagement,npm installfor dependencies, and project-specific testing tools. Subagents are specifically instructed to performcdoperations into worktrees based on paths supplied by the orchestrator.
Audit Metadata