recursive-synthesis
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill functions as a procedural guide for orchestrating document creation. Analysis of all provided files reveals no evidence of malicious intent, unauthorized data access, or credential harvesting.
- Evidence: No malicious patterns or suspicious URLs detected in
SKILL.mdor referenced files. - [NO_CODE]: The skill is comprised entirely of Markdown documentation and prompt templates. No executable scripts (Python, Node.js) or binaries are included with the skill.
- Evidence: Skill contains only
.mdfiles in the root andreferences/directories. - [COMMAND_EXECUTION]: The skill frontmatter requests the
Bashtool, which is used for managing the localsynthesis-project/directory structure and file lifecycle within the synthesis workspace. - Evidence: File management logic in Phase 0 of
SKILL.mduses standard directory and file creation patterns. - [PROMPT_INJECTION]: The process implements structural safeguards against indirect prompt injection by using multiple independent synthesis and review stages (Phases 2, 4, and 5) to refine and validate agent outputs before final document merge.
- Evidence: Multi-phase architecture described in
references/process-design.mdprevents any single agent's input from overriding the final consolidated output without review.
Audit Metadata