conductor-implement
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill provides an indirect prompt injection surface. 1. Ingestion points: It processes data from 'workflow.md', 'spec.md', and 'plan.md'. 2. Boundary markers: No specific delimiters are used to isolate instructions within these files. 3. Capability inventory: The skill can modify project documentation, perform Git commits, and move or delete directories. 4. Sanitization: It utilizes the 'ask_user' tool to obtain explicit user confirmation for synchronization and track cleanup actions.
- [COMMAND_EXECUTION]: The skill defines procedures for significant file system modifications, including the archival and permanent deletion of task-related directories. This logic is outlined in the track cleanup protocol within references/synchronization.md. These actions are protected by human-in-the-loop checkpoints.
Audit Metadata