multi-perspective

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill ingests research questions from user-provided arguments and local project files to generate prompts for sub-agents, creating a surface for indirect prompt injection. * Ingestion points: Research questions are read from $ARGUMENTS and context is gathered from files like CLAUDE.md. * Boundary markers: No explicit markers are used to isolate untrusted input within sub-agent instructions. * Capability inventory: The skill can spawn sub-agents (Task tool), write to the filesystem, and execute specific shell commands. * Sanitization: Input content is processed directly without specific escaping or validation.
  • [COMMAND_EXECUTION]: The skill uses a command-line interface to invoke multiple model providers in 'Council Mode'. * Evidence: It executes 'uv run python -m cli_council' within a local package directory (packages/cli-council) using temporary files for data transfer.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 01:54 AM