orchestrate
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run verification commands such as 'tests', 'builds', and 'diffs' (Step 5: Verify) to audit the quality and safety of deliverables provided by subagents.
- [NO_CODE]: The skill consists entirely of natural language instructions in markdown format (SKILL.md) and does not include any accompanying scripts, binaries, or configuration files that execute logic.
- [PROMPT_INJECTION]: The skill contains a structured process for handling untrusted data, which presents a surface for indirect prompt injection. However, this is inherent to the orchestrator role and no malicious exploitation is present.
- Ingestion points: Subagent deliverables and self-reports are read and audited by the orchestrator (SKILL.md).
- Boundary markers: Absent; the instructions do not explicitly require the use of delimiters when processing subagent outputs.
- Capability inventory: The agent is authorized to run tests, builds, and diff commands (SKILL.md).
- Sanitization: Absent; the skill does not explicitly instruct the agent to sanitize or escape subagent content before verification.
Audit Metadata