execute-task

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill orchestrates a process where a 'Caller' provides software development tasks that are executed by sub-agents. Instructions within these tasks could potentially influence the 'Implementer' or 'Reviewer' agents to perform unintended actions.
  • Ingestion points: The workflow accepts a software development task from an external 'Caller' as described in the 'Position' and 'Main Process' sections of SKILL.md.
  • Boundary markers: The skill defines logical boundaries such as BASE..HEAD for code changes and specific judgment scope for reviewers to restrict the operational area.
  • Capability inventory: The workflow coordinates sub-agents (Implementer and Reviewer) that modify business code and perform validation, implying write and execution capabilities.
  • Sanitization: The skill instructions do not specify mechanisms to sanitize or filter the content of the task provided by the Caller before it is processed by sub-agents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:46 AM
Security Audit — agent-trust-hub — execute-task