ln-300-task-coordinator
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute local Node.js coordination scripts (agent_runner.mjsandcli.mjs) located in theshared/directory. These scripts are used to perform health checks on agents, manage worker execution, and record checkpoints. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted external data which is then used to generate prompts for downstream AI reviewers.
- Ingestion points:
PHASE_1_DISCOVERY(ingests Story AC, Technical Notes, and project context from files or user input). - Boundary markers: Absent. The skill does not employ specific delimiters or "ignore previous instructions" warnings when interpolating external content into the
traceability_prompt.mdfile used in Phase 3. - Capability inventory: The skill possesses
Bashexecution capabilities, file system write access, and the ability to delegate tasks to other worker skills. - Sanitization: Absent. There is no evidence of validation or sanitization of the story content before it is processed and passed to other components.
Audit Metadata