Swarm Orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates agent orchestration based on potentially untrusted external inputs, creating a surface for indirect instructions.\n- Ingestion points: External task descriptions provided via the
--taskargument innpx agentic-flow hooks task-orchestrateand thegoalfield inswarm.autoOrchestrateinSKILL.md.\n- Boundary markers: The skill lacks explicit instructions or delimiters to help the agent differentiate between orchestration instructions and data content within the task descriptions.\n- Capability inventory: The orchestration system allows spawning agents with significant capabilities, such ascoderandtester(mentioned inSKILL.md), which may execute code or modify the local environment.\n- Sanitization: There is no mention or implementation of validation or sanitization for the task goals before they are processed by the swarm.
Audit Metadata