parallel-execution-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to process data from untrusted external sources, including repository status outputs (e.g., git status, ripgrep), unit test results, browser screenshots, and live service logs.
- Ingestion points: Data enters the agent's context through tools like Bash (running git/rg), browser checks, and deploy readbacks (fetching logs from live URLs).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within these external data streams.
- Capability inventory: The skill utilizes powerful tools including Bash, Write, and Edit, which could be leveraged if the agent inadvertently follows instructions found in external data.
- Sanitization: No explicit sanitization or validation steps are provided for the content of processed logs or scan results.
Audit Metadata