sdlc
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's logic is transparent and focuses on repository management and workflow automation without any detected malicious patterns. It explicitly incorporates human-in-the-loop checkpoints for all code and configuration changes.
- [EXTERNAL_DOWNLOADS]: CI templates reference the official @anthropic-ai/claude-code package. This is a well-known service, and its use here is consistent with the skill's purpose as an extension for AI-assisted development.
- [COMMAND_EXECUTION]: The skill utilizes common developer tools such as git, bash, and gh (GitHub CLI). These tools are used for standard operations like branching, committing, and PR management.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data such as user-provided feature descriptions and git commit logs. This potential attack surface is managed through strict instructions requiring the agent to obtain user confirmation before committing any generated artifacts.
Audit Metadata