gang-orch
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
hiveandtmuxCLI tools to perform legitimate administrative actions, such as spawning agent peers (hive gang spawn-peer), renaming terminal windows for organization (tmux rename-window), and checking team status (hive team). These operations are consistent with the orchestrator persona. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and processes data (verdicts and status signals) from other agents (validators and skeptics). This is inherent to the multi-agent collaboration workflow described.
- Ingestion points: Reads status signals from
<gang>.skepticand integrated validation results. - Boundary markers: No explicit delimiters or sanitization instructions are provided for external agent input.
- Capability inventory: The skill can execute commands via
hiveand write to the local filesystem using theEdittool. - Sanitization: Not explicitly implemented; however, the logic restricts actions to a specific protocol (flipping status bits or requesting human intervention).
Audit Metadata