subagents-creator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for delegating tasks to specialized subagents that process data from potentially untrusted sources, such as web searches and internal codebases.
- Ingestion points: External data is ingested via the
librarianagent using tools likewebfetchandWeb Search, while internal data is processed by theexploreagent searching the codebase. Evidence found inreferences/subagent-types.md. - Boundary markers: The skill mandates a 7-section delegation structure to define task scope, though it does not explicitly specify data-level delimiters. Evidence found in
SKILL.mdandreferences/delegation-patterns.md. - Capability inventory: Subagents are granted access to tools such as
Grep,Read,Glob,webfetch, and theGitHub CLI. Evidence found inreferences/delegation-patterns.md. - Sanitization: The documentation provides explicit guidance on verifying delegated output and using tool whitelists to minimize risk. Evidence found in
SKILL.mdandreferences/common-pitfalls.md. - [COMMAND_EXECUTION]: The instructions and templates include the use of shell-based tools for code analysis and file system navigation.
- Evidence: Examples in
references/common-pitfalls.mdandreferences/delegation-patterns.mddemonstrate the use ofgrep,glob, andast_grep_searchwithin subagent prompts.
Audit Metadata