tiling-tree
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and documentation describe using
python3to execute the local scripttiling_tree.pylocated within the skill's own directory. This is standard operational behavior for executing skill logic. - [EXTERNAL_DOWNLOADS]: The skill depends on the
orchestrating-chat-agentsskill. It modifies the Python path to import modules from/mnt/skills/user/orchestrating-chat-agents/scripts. This is a internal dependency between trusted local skills and does not involve untrusted remote sources. - [INDIRECT_PROMPT_INJECTION]: The skill processes a user-provided 'problem' string which is interpolated into prompts for subagents.
- Ingestion points: The
problemargument intiling_tree.pyenters the agent context through the_splitter_promptand_evaluator_promptfunctions. - Boundary markers: Prompts use clear instruction/data separation with quotes (e.g.,
Problem space to partition: "{label}"). - Capability inventory: The skill has capabilities to write files to
/mnt/user-data/and invoke parallel LLM calls via theclaude_clientdependency. - Sanitization: Standard prompt interpolation is used; while there is no explicit character-level sanitization, the use of system prompts and structural delimiters reduces the risk of accidental instruction obedience.
Audit Metadata