subagent-driven-development
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface through the ingestion of implementation plans. * Ingestion points: Implementation plan files processed by the
task-briefscript. * Boundary markers: Not explicitly defined in the task briefings. * Capability inventory: Includes file system writes to a local workspace, execution of bundled bash scripts, git operations, and the ability to dispatch subagents with specific instructions. * Sanitization: No explicit content filtering is applied to plan text. The skill includes a mitigation strategy requiring the agent to scan plans for conflicts and escalate ambiguity to the user before starting. - [COMMAND_EXECUTION]: The skill executes several bash scripts (
scripts/task-brief,scripts/review-package,scripts/sdd-workspace) to manage its workflow. These scripts use standard unix tools like awk and git. The scripts include safety measures such asset -euo pipefailand input validation viagit rev-parseto ensure parameters represent valid git objects before use.
Audit Metadata