coordinator-init-mode

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes git config user.name to retrieve the developer's name for attribution within the team structure. It contains an explicit safety instruction to avoid reading user.email to protect user privacy.
  • [PERSISTENCE]: Modifies the repository's .gitattributes file to register union merge drivers for squad-specific files. This ensures that log files and decision records persist correctly across branch merges without manual conflict resolution.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided descriptions of the project and tech stack to populate the initial history and charters of generated agents.
  • Ingestion points: User input provided during Phase 1 (SKILL.md).
  • Boundary markers: The skill does not define specific delimiters for separating user-provided context from agent instructions in the generated .squad/agents/*/history.md files.
  • Capability inventory: The skill performs file system writes to the .squad/ directory and modifies the root .gitattributes file.
  • Sanitization: There is no explicit sanitization step described for user-supplied strings before they are seeded into agent charters.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:12 PM