conductor-validator
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific documentation files to validate consistency, track IDs, and status markers.
- Ingestion points: Local Markdown files located in the
conductor/directory, includingindex.md,product.md,tech-stack.md,workflow.md, andtracks.md(identified inSKILL.md). - Capability inventory: The agent is instructed to read, resolve links, and reconcile markers within these files using its standard file-reading tools.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its operational rules and potentially malicious instructions embedded within the Markdown files it reads.
- Sanitization: No sanitization or filtering logic is specified for the content retrieved from the project artifacts.
Audit Metadata