orchestration
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill recommends executing
bunx ccrecall syncfor session analytics. This command invokes a third-party utility that is not part of the standard platform toolset and accesses internal platform configuration files located at~/.claude/teams/. Evidence: Found inreferences/task-management.mdunder the 'Team Cleanup' section. - [REMOTE_CODE_EXECUTION]: The use of
bunxto run theccrecallpackage fetches and executes code from an external registry at runtime. Evidence:bunx ccrecall syncinreferences/task-management.md. - [INDIRECT_PROMPT_INJECTION]: The skill orchestrates sub-agents by interpolating task descriptions into prompts. This pattern creates a vulnerability surface for indirect prompt injection if descriptions contain untrusted data. Evidence Chain: (1) Ingestion points: Task descriptions in
references/task-management.mdandreferences/patterns.md. (2) Boundary markers: Absent. (3) Capability inventory: Significant, including file system manipulation (git worktree) and external execution (bunx). (4) Sanitization: Absent. - [EXTERNAL_DOWNLOADS]: The
bunxutility downloads theccrecallpackage from the npm registry if it is not already installed. Evidence:references/task-management.md.
Audit Metadata