swarming-failing-tests
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
sibling_setup.shscript includes logic to clone the vendor's officialclaude-skillsrepository from GitHub if the scripts are not already present in the environment.- [COMMAND_EXECUTION]: The harness relies heavily on system command execution via Python'ssubprocessmodule to perform git operations (worktree management, merging, committing), execute project-specific test runners, and manage subagent life cycles.- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests failure reasons and stage labels from external test runner output, which are then interpolated into prompts for subagents. This risk is managed through a normalization process inworkqueue.pythat masks specific identifiers, hex values, and paths to create stable failure signatures.
Audit Metadata