subagent-delegation
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
devspaceCLI utility to perform subagent management, including listing, running, and continuing sessions viadevspace agentscommands. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface where it ingests and processes data from external subagents. If a subagent's output is compromised or contains malicious instructions, the main agent could be influenced.
- Ingestion points: Subagent responses are retrieved using the
devspace agents showcommand as described inSKILL.md. - Boundary markers: No specific delimiters or XML tags are mandated for subagent output to separate it from the main prompt context.
- Capability inventory: The skill utilizes the
devspace agentssuite (ls,run,continue,show) for process management. - Sanitization: The instructions include a mitigation strategy requiring the agent to "inspect changed files," "run or explain relevant tests," and "verify that important claims are supported by repo evidence" before accepting subagent output.
Audit Metadata