recursive-synthesis

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill functions as a procedural guide for orchestrating document creation. Analysis of all provided files reveals no evidence of malicious intent, unauthorized data access, or credential harvesting.
  • Evidence: No malicious patterns or suspicious URLs detected in SKILL.md or referenced files.
  • [NO_CODE]: The skill is comprised entirely of Markdown documentation and prompt templates. No executable scripts (Python, Node.js) or binaries are included with the skill.
  • Evidence: Skill contains only .md files in the root and references/ directories.
  • [COMMAND_EXECUTION]: The skill frontmatter requests the Bash tool, which is used for managing the local synthesis-project/ directory structure and file lifecycle within the synthesis workspace.
  • Evidence: File management logic in Phase 0 of SKILL.md uses standard directory and file creation patterns.
  • [PROMPT_INJECTION]: The process implements structural safeguards against indirect prompt injection by using multiple independent synthesis and review stages (Phases 2, 4, and 5) to refine and validate agent outputs before final document merge.
  • Evidence: Multi-phase architecture described in references/process-design.md prevents any single agent's input from overriding the final consolidated output without review.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 06:13 PM