ouroboros-run
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where untrusted data is processed to influence agent behavior and tool calls.\n
- Ingestion points: Processes external specification files provided via
seed_pathand user signals delivered during runtime viaouroboros_session_signal(SKILL.md).\n - Boundary markers: Employs a structured
job_observercontract with explicit verification steps to ensure data integrity during agent-to-agent handoffs.\n - Capability inventory: Utilizes tools for background job execution (
ouroboros_start_execute_seed), session management, and theorchestrate_subagentscapability for monitoring.\n - Sanitization: Includes 'fail-closed' instructions for validating the structural integrity of session metadata and contracts.\n- [DYNAMIC_EXECUTION]: The skill utilizes the
orchestrate_subagentscapability to spawn child agents that monitor background tasks.\n - Evidence: Instructions mandate spawning an observer by passing a dynamically recovered
job_observercontract (SKILL.md).\n - Risk: While the observer is restricted to read-only operations, the dynamic instantiation of sub-agents based on session metadata represents a complex execution flow.
Audit Metadata