specialist-skill-routing
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely instructional and contains no executable code, remote script downloads, or network operations. It functions as a mapping system to guide the AI agent toward relevant tools and frameworks based on user intent.
- [PROMPT_INJECTION]: The skill processes untrusted user-supplied task descriptions to match triggers for activating sub-skills. This constitutes an indirect prompt injection surface where task descriptions could influence the agent's internal state by loading specific skills.
- Ingestion points: Task descriptions provided in user input (as defined in SKILL.md).
- Boundary markers: Absent. The skill performs direct matching on user text without delimiters.
- Capability inventory: No file writing, network calls, or subprocess executions are implemented in this skill; it only uses the internal
Skill()andAgent()delegation commands. - Sanitization: No sanitization or validation of the input text is performed before trigger matching.
- [COMMAND_EXECUTION]: The skill contains technical guidance for CLI tools like
uv,hatchling, andpre-commit. This information is provided as reference material for the agent's code generation processes and does not represent commands executed by the skill itself.
Audit Metadata