agent-tool-orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates a strong commitment to security, incorporating advanced patterns for tool sequencing, role-based access control, and policy-driven execution. No malicious patterns such as prompt injection, obfuscation, or unauthorized exfiltration were detected.\n- [INDIRECT_PROMPT_INJECTION]: While the skill interacts with external tool outputs, it treats them as untrusted data. It mitigates injection risks by enforcing Model Context Protocol (MCP) tool contracts, using inter-agent communication schemas, and mandating input/output validation.\n- [COMMAND_EXECUTION]: The skill includes the
execute_commandtool but wraps its use in strict safety protocols. It requires identifying active roles, checking actions againstaction-boundaries.yaml, and obtaining explicit user approval for state-changing or destructive commands.\n- [DATA_EXFILTRATION]: Comprehensive data classification and redaction strategies are integrated viadata-classification.yamlto ensure that sensitive identifiers, PII, and credentials are not logged or transmitted in handoff artifacts.
Audit Metadata