execute-task
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill orchestrates a process where a 'Caller' provides software development tasks that are executed by sub-agents. Instructions within these tasks could potentially influence the 'Implementer' or 'Reviewer' agents to perform unintended actions.
- Ingestion points: The workflow accepts a software development task from an external 'Caller' as described in the 'Position' and 'Main Process' sections of
SKILL.md. - Boundary markers: The skill defines logical boundaries such as
BASE..HEADfor code changes and specificjudgment scopefor reviewers to restrict the operational area. - Capability inventory: The workflow coordinates sub-agents (Implementer and Reviewer) that modify business code and perform validation, implying write and execution capabilities.
- Sanitization: The skill instructions do not specify mechanisms to sanitize or filter the content of the task provided by the Caller before it is processed by sub-agents.
Audit Metadata