intelligence-route
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @claude-flow/cli@latest, which downloads and executes the latest version of a package from the npm registry at runtime without version pinning. - [COMMAND_EXECUTION]: Provides instructions for the agent to execute shell commands using
npxandmcp tool callto route tasks and record outcomes. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted task descriptions through routing and prediction tools.
- Ingestion points: Task descriptions are ingested as the primary argument in
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the task description are present.
- Capability inventory: The skill has access to the
Bashtool and multiplemcp__claude-flow__hooks for model routing and prediction. - Sanitization: No sanitization or validation of the input task description is defined before it is passed to the routing tools.
Audit Metadata