implement-plan
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto interact with Git for repository inspection tasks such asgit status,git rev-parse, andgit branch. These operations are essential for its primary function of verifying the repository state before and after code implementation. It also executes its own internal Python scripts using a defined manifest-based protocol. - [DYNAMIC_EXECUTION]: The skill utilizes
importlib.import_moduleand__import__to load thetree-sitterlibrary and its associated language grammars (e.g., for Javascript, Rust, and Python). This dynamic loading is used to perform structural code verification (AST analysis) to confirm implementation fidelity against the plan. - [INDIRECT_PROMPT_INJECTION]: The skill processes implementation plans that define repository edits. While these plans are external data, the skill mitigates injection risks by requiring adherence to a strict, machine-verifiable contract (
plan-contract v6) that includes structural validation, mandatory evidence fields, and cryptographic receipts to prevent unauthorized behavior changes.
Audit Metadata