audit-agent-consolidation
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
BashandTasktools to scan the filesystem for agent definitions located inplugins/and.claude/agents/directories.- [COMMAND_EXECUTION]: The--executeargument enables an interactive mode that modifies files to apply consolidation plans, though it incorporates a safety measure requiring explicit user confirmation for each operation.- [PROMPT_INJECTION]: An indirect prompt injection surface exists because the skill ingests data from external agent markdown files and passes it to a subagent (agent-consolidation-analyst) for analysis.\n - Ingestion points: Agent configuration files and YAML frontmatter found in plugin and project directories.\n
- Boundary markers: Not explicitly implemented in the logic.\n
- Capability inventory: Access to
BashandTasktools.\n - Sanitization: No specific filtering or sanitization of external configuration data is documented.
Audit Metadata