tech-hub-orchestrator
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestrator is designed to run shell commands for testing, linting, and building projects. These operations are limited to project verification and use standard development tools.
- [SAFE]: The skill implements a session continuity protocol using a local '.claude/' directory to store state, roadmaps, and checkpoints. This is a functional design for complex multi-session tasks and does not involve external data exfiltration.
- [SAFE]: A drift detection mechanism is included that compares SHA256 hashes of project files before resuming sessions, providing a security layer against unexpected workspace modifications.
- [SAFE]: The agent architecture involves processing local state files (Ingestion: .claude/state/ROADMAP.md, .claude/state/HANDOFF.md in AGENTS.md; Boundaries: Absent; Capabilities: Agent spawning and Bash execution; Sanitization: Absent). While this creates an indirect prompt injection surface, it is a structural necessity for the skill's primary orchestration purpose and includes integrity checks to mitigate risk.
Audit Metadata