multica-squads

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill operates entirely within the scope of its intended purpose: managing squad coordination and leader routing within the Multica platform. It uses the permitted 'multica' CLI tool for all operations and provides clear documentation and warnings regarding side effects.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages a squad's coordination instructions, which are later injected into a squad leader's briefing. This creates a potential surface for indirect prompt injection if malicious data is provided as instructions. This is a core functional feature of the platform and is managed as intended.\n
  • Ingestion points: Squad instructions are ingested via the multica squad update command and recorded in the instructions field as described in SKILL.md.\n
  • Boundary markers: The platform provides a structured 'Squad Leader Briefing' that includes a specific 'Squad Instructions' segment to isolate this content.\n
  • Capability inventory: The skill and the resulting leader agent are restricted to the 'multica' CLI toolset.\n
  • Sanitization: No explicit sanitization of instruction text is performed within the skill; the platform handles the final prompt construction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 12:39 PM