multica-creating-agents
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages the
instructionsfield for agents, which is defined as the durable behavior contract and system prompt for the agent's runtime. While this is the intended purpose of the management tool, it represents a surface where user-supplied content could influence agent behavior. - Ingestion points:
multica agent create --instructionsandmultica agent update --instructionsinSKILL.md. - Boundary markers: The documentation distinguishes between the
description(metadata) andinstructions(behavior contract), clarifying that only the latter is injected into the runtime prompt. - Capability inventory: The skill uses the
Bashtool to executemulticaCLI commands for agent management. - Sanitization: Standard CLI validation is performed on numeric fields like concurrency, but the instruction content is passed as the runtime behavior contract.
- [COMMAND_EXECUTION]: The skill references administrative and testing commands used to verify the platform's agent creation contracts against its source code.
- Evidence:
go test ./internal/service -run TestCreatingAgentsSkillCoversAgentCreationContractsand other verification commands located inreferences/creating-agents-source-map.md. - Context: These commands are provided for conformance evaluation by developers working within the platform's ecosystem.
Audit Metadata