orchestrate
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands for environment maintenance and local data updates. Specifically, it uses
pkill(Unix) andStop-Process(Windows) to clean up orphaned development processes between waves. It also employs shortnode -eandpython -csnippets to programmatically updatefeature_list.jsonwith verification results. These actions are restricted to the local filesystem and the specific project context. - [PROMPT_INJECTION]: As an orchestrator, the skill reads untrusted repository content (e.g., source code, README files) to synthesize instructions for subagents. This creates a surface for indirect prompt injection. However, the skill incorporates mitigation strategies such as explicit boundary markers in prompt templates, mandatory verification steps, and a structured feature list to maintain control over the build process.
Audit Metadata