skills/davidlee/doctrine/execute/Gen Agent Trust Hub

execute

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands using the doctrine CLI utility (e.g., doctrine slice status, doctrine slice phase, doctrine check gate, doctrine worktree land) and standard development tools like cargo clippy. These commands are standard for the described workflow and do not involve administrative privileges.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external files which could theoretically contain malicious instructions targeting the agent. This is a common surface for developer-focused skills that ingest project documentation.
  • Ingestion points: phase-NN.md, plan.toml, plan.md, design.md, and slice-nnn.md.
  • Boundary markers: None specified.
  • Capability inventory: File system access for code implementation, execution of doctrine and cargo commands, and various internal tool calls (/harvest, /worktree, /record-memory, /consult, /audit).
  • Sanitization: None specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 11:04 AM