implement-plan

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to interact with Git for repository inspection tasks such as git status, git rev-parse, and git branch. These operations are essential for its primary function of verifying the repository state before and after code implementation. It also executes its own internal Python scripts using a defined manifest-based protocol.
  • [DYNAMIC_EXECUTION]: The skill utilizes importlib.import_module and __import__ to load the tree-sitter library and its associated language grammars (e.g., for Javascript, Rust, and Python). This dynamic loading is used to perform structural code verification (AST analysis) to confirm implementation fidelity against the plan.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes implementation plans that define repository edits. While these plans are external data, the skill mitigates injection risks by requiring adherence to a strict, machine-verifiable contract (plan-contract v6) that includes structural validation, mandatory evidence fields, and cryptographic receipts to prevent unauthorized behavior changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 07:31 AM