coordination-core
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured coordination protocol with built-in validation.
- The
scripts/validate_envelope.pyscript includes explicit checks for path traversal (..) in task-owned paths to prevent unauthorized file access. - The protocol mandates human approval for all consequential or external actions, ensuring a human-in-the-loop for risky operations.
- The instructions explicitly warn against trusting agent summaries as proof of work, requiring verification against artifacts or live systems, which serves as a defense against indirect prompt injection.
- Included Python scripts (
classify.py,validate_envelope.py) perform local data processing with strict input validation and do not perform network operations, access sensitive credentials, or execute arbitrary code.
Audit Metadata