parallel-agents
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions (SKILL.md) direct agents to use shell commands such as
echo,cat, andtailto record and verify the status of parallel tasks within the local.claude/cache/directory. - [PROMPT_INJECTION]: The orchestration template is susceptible to indirect prompt injection because user-defined variables are used directly in shell commands.
- Ingestion points: Subagents receive
<identifier>and<batch>names which are interpolated intoechocommands inSKILL.md. - Boundary markers: There are no delimiters or instructions to ignore embedded characters in the interpolated variables.
- Capability inventory: Subagents have the capability to execute shell commands via the
Taskinterface. - Sanitization: The skill does not provide methods to escape or validate these variables before execution.
Audit Metadata