rally
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to coordinate multiple autonomous agents, creating an inherent surface for indirect prompt injection during the synthesis of their outputs.\n
- Ingestion points: The skill ingests completion reports and file changes from spawned sub-agents during the SYNTHESIZE phase, as described in SKILL.md and reference/lifecycle-management.md.\n
- Boundary markers: Utilizes an ownership_map (exclusive_write/shared_read) and git worktree isolation to partition sub-agent activities and prevent silent data corruption, as detailed in reference/file-ownership-protocol.md.\n
- Capability inventory: Manages sub-agents with significant capabilities, including full toolsets (general-purpose type) and shell access (Bash type), as documented in reference/agent-teams-api-reference.md.\n
- Sanitization: Implements a mandatory reconciliation layer and closed-loop validation to verify that synthesized agent outputs align with the original user requirements independently of the agents' own status reports.\n- [DYNAMIC_EXECUTION]: The skill dynamically generates prompts and context configurations for spawning sub-agents (teammates) based on the decomposition of primary tasks into independent parallel units.\n- [COMMAND_EXECUTION]: The skill utilizes platform-specific tools for agent orchestration and leverages git worktree commands to maintain isolated execution environments for concurrent tasks.
Audit Metadata