rehydrate
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external workflow state and repository metadata to generate 'House Rules' and 'Event Emission Hints' that guide agent behavior.
- Ingestion points: Workflow state is retrieved via 'exarchos:exarchos_workflow' and 'exarchos_view pipeline' tools.
- Boundary markers: The instructions do not define clear delimiters or 'ignore' warnings to isolate the rehydrated data from system instructions.
- Capability inventory: The skill can trigger orchestration scripts via 'exarchos_orchestrate' and update state via tool calls.
- Sanitization: No sanitization or validation of the rehydrated content is specified before it is rendered into the agent's context.
- [COMMAND_EXECUTION]: The skill utilizes an orchestration tool to perform state reconciliation.
- Evidence: The 'exarchos_orchestrate' tool is called with a 'reconcile_state' action to compare the state file against the repository root.
Audit Metadata