claude-multi-agent
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
run-team.sh,run-workflow.sh,resume-team.sh) to invoke theclaudeCLI for managing multi-agent engineering sessions. These scripts pass user-provided goals and feedback as prompts to the agent tier. Thelib/lifecycle.shutility manages the process lifecycle of these commands usingps,awk, andkillto ensure clean teardown of child processes and their descendants. - [DYNAMIC_EXECUTION]: The skill utilizes Claude Code's native dynamic workflow feature through
assets/workflows/gpt-engineer-dynamic.js. This JavaScript-based orchestration manages parallel research, planning, building, and verification phases. Therun-workflow.shwrapper manages the execution of this workflow within isolated git worktrees to prevent accidental mutations to the main checkout. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted repository content (source code, documentation, CI logs) and user-supplied engineering goals which are processed by subagents. This creates a vulnerability surface for indirect prompt injection. The skill implements several mitigations, including strict JSON schemas for agent outputs and explicit safety instructions in the workflow prompts to prevent unauthorized commits, pushes, or external network operations.
- [EXTERNAL_DOWNLOADS]: The
post-edit-lint.shhook usesnpx --no-installto execute theprettierformatter after file modifications, and thebootstrap.shscript verifies the presence of theclaudeCLI on the system path. These are routine development operations for tool discovery and maintenance.
Audit Metadata