build-phases

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash to execute local toolchain commands for building, type-checking, and testing code (e.g., pnpm build, pnpm test, biome check). It also manages version control by performing git commits to track implementation and simplification phases. These operations are core to the skill's purpose as an automated developer tool.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests and acts upon instructions from planning files like tasks.md and design.md. Ingestion points: Files in the planning directory. Boundary markers: Relies on its internal multi-layer verification loop and a separate design review sub-agent to validate implementation against the spec. Capability inventory: Full local command execution and sub-agent spawning. Sanitization: The skill uses an independent reviewer agent and mandatory E2E log validation to ensure the executor follows the intended plan without unauthorized side effects.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 10:26 PM
Security Audit — agent-trust-hub — build-phases