orchestrating-subagents
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The coordination guidelines describe a pattern where results from one subagent (e.g., research output) are interpolated into the instructions for a subsequent subagent (e.g., implementation scope) without defined sanitization or boundary markers.\n
- Ingestion points: The specialist briefs defined in SKILL.md, specifically the 'Input', 'Scope', and 'Objective' fields which process outputs from previous tasks.\n
- Boundary markers: Absent; the guidelines use a plain text brief format without instructions to ignore embedded commands or the use of explicit delimiters to wrap untrusted subagent output.\n
- Capability inventory: The orchestration logic facilitates significant capabilities, including file system writes, git operations (staging and committing), and the execution of further subagents.\n
- Sanitization: Absent; the skill does not prescribe validation, escaping, or filtering of specialist output before it is recycled into the context of another agent dispatch.
Audit Metadata