issue-implement

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the execution of various development tools and verification scripts to complete its tasks.
  • Evidence: Explicitly requires the use of tdd and code-review skills during the implementation process.
  • Evidence: Instructions to run focused tests, typechecking, and full test suites before finishing work.
  • [SAFE]: The skill incorporates safeguards for handling project data and maintaining repository integrity.
  • Ingestion points: Reads local configuration (.and/config.yml), Package Contracts, and PRD records from the repository.
  • Boundary markers: Explicitly instructs the agent to treat the backend contract as the source of truth rather than chat history, reducing the risk of accidental prompt injection.
  • Capability inventory: Performs git operations (worktree/branch creation), file system modifications within the worktree, and test execution.
  • Sanitization: Enforces isolation by requiring dedicated worktrees for implementation to prevent cross-contamination or unintended changes to the main branch.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 04:24 PM
Security Audit — agent-trust-hub — issue-implement