models-round-table
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts to interface with various model runners. These scripts are part of the platform's skill infrastructure and are used to orchestrate the multi-model consensus process.
- Evidence:
SKILL.mdandreferences/runner-invocations.mddocument shell commands likepython3 .agents/skills/codex-runner/scripts/run_codex.pywith parameter passing for timeouts, schemas, and output files. - [PROMPT_INJECTION]: The skill passes raw user-provided prompts verbatim to multiple sub-agents. This creates a surface for indirect prompt injection where a malicious task could attempt to influence the models' behavior. However, the orchestrator enforces
--restrict-toolsand validates output against fixed JSON schemas, which restricts the potential impact to the content of the synthesis rather than system integrity. - Evidence:
SKILL.mdPhase 1 instructions specify sending the<raw prompt verbatim>to all available seats. - [EXTERNAL_DOWNLOADS]: The skill references and interacts with several well-known AI services and models (Claude, Codex, Gemini, Kimi) through authorized runner scripts and sub-agent tools.
- Evidence:
SKILL.mddefines a seat table including Opus 4.8, Sonnet 4.6, Codex, Gemini, and Kimi.
Audit Metadata