coordinator
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
workmuxCLI to manage agent sessions and execute shell commands within specific git worktrees (e.g.,workmux run agent-a -- pytest). This behavior is the primary function of the coordinator skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user instructions and external markdown files to generate prompt files for sub-agents.
- Ingestion points: User tasks, conversation history, and markdown files (plan/spec) read via the
Readtool. - Boundary markers: None explicitly defined in the instructions for isolating external content within the generated prompt files.
- Capability inventory: The skill has access to the
Bashtool and can execute arbitrary shell commands viaworkmux run. - Sanitization: No explicit sanitization or escaping of ingested data is described before interpolation into prompt files.
- [DYNAMIC_EXECUTION]: The skill dynamically creates temporary markdown files using
mktempandcatto store instructions, which are then loaded and executed by new agent sessions usingworkmux add -P <file>. This is a core component of the agent dispatching workflow.
Audit Metadata