cross-squad
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines orchestration logic for managing multiple local project instances ('squads'). It instructs the agent on how to bootstrap new environments and delegate tasks using established protocols.
- [SAFE]: Disambiguation instructions for terminology ('squad' vs. 'group of agents') are standard operational guidance for the agent and do not attempt to bypass safety filters or ignore ethical constraints.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data by reading
.squad/manifest.jsonfiles from other repository paths (e.g.,../friend-repo). - Ingestion points: The skill reads manifest files via
squad registry addandsquad discovercommands inSKILL.md. - Boundary markers: The skill does not explicitly mention sanitization of manifest fields, but treats them as structured JSON data for capability discovery.
- Capability inventory: The skill uses
git init,squad init,gh issue create, andgh issue view(documented inSKILL.md). - Sanitization: The skill provides explicit warnings against sharing authentication credentials or secrets in cross-squad communication, which serves as a manual sanitization guideline for the agent.
- [COMMAND_EXECUTION]: The skill utilizes legitimate developer tools including
git,gh(GitHub CLI), and thesquadCLI tool (a vendor resource from 'sbroenne') to perform repository management and issue tracking. These operations are within the expected scope of a project orchestration skill.
Audit Metadata