council
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied brainstorming questions and constraints, which are then passed to sub-agents as a 'brief'.
- Ingestion points: User input captured via
$ARGUMENTSinSKILL.mdis written to.council/brief.mdby the orchestrator. - Boundary markers: The sub-agent templates in
prompts.md(diverge, cross, curator, judge, developer, stress) wrap the brief content within=== THE BRIEF ===and=== END OF THE BRIEF ===delimiters to prevent instructions inside the brief from being mistaken for agent instructions. - Capability inventory: The orchestrator uses
python3for state management and theAgenttool to spawn sub-agents. Sub-agents (developerandstressphases) have access to web search tools for fact-checking. - Sanitization: The skill relies on structured delimiters rather than complex sanitization, which is appropriate for its intended use as a collaborative brainstorming tool.
- [COMMAND_EXECUTION]: The skill uses a local Python script (
council.py) to manage the state of the multi-round brainstorming session. This script uses standard library modules and performs legitimate file system operations within the.council/directory to track progress and store sub-agent outputs.
Audit Metadata