conductor-validator

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific documentation files to validate consistency, track IDs, and status markers.
  • Ingestion points: Local Markdown files located in the conductor/ directory, including index.md, product.md, tech-stack.md, workflow.md, and tracks.md (identified in SKILL.md).
  • Capability inventory: The agent is instructed to read, resolve links, and reconcile markers within these files using its standard file-reading tools.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its operational rules and potentially malicious instructions embedded within the Markdown files it reads.
  • Sanitization: No sanitization or filtering logic is specified for the content retrieved from the project artifacts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 04:26 PM