beads-hive-omo-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
bdCLI andgitfor issue tracking and repository management. These operations, such asbd syncandgit worktreemanagement, are essential to the primary function of the workflow. - [PROMPT_INJECTION]: The multi-agent delegation architecture (Prometheus, Atlas, Forager) involves an indirect prompt injection surface as information flows through the task chain.
- Ingestion points: Data from
hive_plan_writeand.hive/context files are ingested and used to generate prompts for downstream agents. - Boundary markers: The skill does not define specific boundary markers or 'ignore' instructions when interpolating plans into worker prompts.
- Capability inventory: The orchestrator has the ability to spawn agents via
task()and modify the project state throughhive_mergeandgit push. - Sanitization: No sanitization of ingested plans or context data is mentioned before processing.
- [SAFE]: The identified patterns are inherent to the skill's purpose as an orchestration framework. All tools and resource patterns align with the specified vendor (nanomicon) and established developer workflows.
Audit Metadata