dispatch-implement
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell scripts (
scripts/spawn-implementer.shandscripts/check-env.sh) that execute various system commands, includinggit,python3, and specialized tools likewt(worktrunk) andorca-ide. These scripts are used to manage worktrees, parse JSON output, and interface with the orchestration engine. - [INDIRECT_PROMPT_INJECTION]: The script
scripts/spawn-implementer.shreads task specifications from an external file provided via the--spec-fileargument and passes the raw content directly into theorca-ideorchestration command. - Ingestion points: The
--spec-fileparameter inscripts/spawn-implementer.shallows the skill to load arbitrary text data from a file on the file system. - Boundary markers: No explicit delimiters or instruction isolation techniques (such as "ignore embedded instructions" headers) are used when passing the spec file content to the worker sessions.
- Capability inventory: The skill has the capability to initialize new worker sessions, manage git worktrees, and execute orchestration commands that can influence subsequent agent behaviors.
- Sanitization: There is no evidence of sanitization, validation, or escaping of the ingested specification file content before it is processed.
Audit Metadata