multi-agent-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources, creating a surface for indirect prompt injection attacks.
- Ingestion points: Research agents (Reddit Scout, LinkedIn Scout) perform searches and browse external posts/discussions in Phase 4.
- Boundary markers: The instructions do not define explicit boundary markers or delimiters to isolate untrusted external content from agent instructions.
- Capability inventory: The skill incorporates tools for external action, including
post_comment(Reddit),send_message(LinkedIn),post_tweet(Twitter), andsend_email(Email). - Sanitization: There is no mention of sanitizing, escaping, or validating external content before it is processed by the Content Lead or Copywriter agents. However, the 'Review Hub' (Phase 7) serves as a critical human-approval gate that mitigates the risk of automated execution of malicious outputs.
Audit Metadata