conductor-implement
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill constructs
git commitcommands by interpolating task descriptions parsed directly fromplan.md. This pattern creates a risk of command injection if task descriptions contain shell metacharacters or subcommands (e.g.,$(...)or`...`). - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests instructions and data from external files to drive its logic without sufficient isolation.
- Ingestion points: Reads project requirements, implementation plans, and workflow configurations from
conductor/tracks/,spec.md, andplan.md. - Boundary markers: The instructions do not define delimiters or specific 'ignore' rules for content parsed from these files.
- Capability inventory: The skill has the ability to execute shell commands (
git,npm,pytest) and perform persistent file system writes. - Sanitization: There is no evidence of validation or sanitization of the content extracted from project files before it is used to influence agent behavior or command construction.
Audit Metadata