intelligence-route
Warn
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch the@claude-flow/clipackage from the NPM registry at runtime. - [REMOTE_CODE_EXECUTION]: Running
npx @claude-flow/cli@latestexecutes remote code downloaded from a public repository without version pinning. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool and provides shell commands to perform routing and track task success. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes untrusted task descriptions through multiple intelligence and prediction tools.
- Ingestion points: The
<task-description>input inSKILL.md. - Boundary markers: None; input is passed directly to tool parameters.
- Capability inventory: Access to shell commands and network-based routing tools.
- Sanitization: No input validation or sanitization is mentioned.
Audit Metadata