conductor-new-track

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a project management workflow for creating 'tracks' (features, bugs, etc.). It reads and writes to a local conductor/ directory to maintain project context.
  • [SAFE]: No external network requests, remote code execution, or suspicious command patterns were detected. All file operations are scoped to the project environment.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests user input for summaries and user stories, it does so through an interactive Q&A process. The risk of indirect injection is low as the data is used to generate documentation rather than being executed as code.
  • [DYNAMIC_EXECUTION]: The skill uses placeholders for track IDs and metadata, but these are simple string substitutions within markdown and JSON templates, posing no dynamic execution risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 07:09 PM