dynamic-harness
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to manage and synthesize data from multiple sub-agents (workers), which creates a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read and integrate worker reports, results, and material claims from independent worker scopes as defined in
SKILL.md. - Boundary markers: The skill mitigates risks by requiring structured briefs for each worker and assigning disjoint write scopes to prevent accidental context bleed or collision.
- Capability inventory: The skill utilizes the agent's file system and command execution capabilities to run a local initialization script and perform verification checks.
- Sanitization: Robust instructions are provided requiring the agent to manually inspect all changed paths and verify every material claim against a rubric before integration into the main project.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script to initialize the mission workspace.
- Evidence: The
SKILL.mdfile contains instructions to executepython3 "$SKILL_DIR/scripts/start_mission.py". - Context: This command is used for legitimate setup purposes, such as creating directories for handoffs and worker reports, and generating a mission ledger template.
Audit Metadata