skills/edwinhu/workflows/ds-implement/Gen Agent Trust Hub

ds-implement

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses uv run to execute local Python scripts via hooks (e.g., ds-post-subagent-guard.py, phase-gate-guard.py) for security enforcement and state management.
  • [DYNAMIC_CONTEXT_INJECTION]: Utilizes the ! syntax in SKILL.md to run a local script (load-constraints.py) during skill initialization to configure the execution environment. This is a standard configuration pattern for this workflow.
  • [DATA_EXPOSURE]: The skill reads and writes state information and audit logs to the .planning/ directory (e.g., PLAN.md, LEARNINGS.md, IMPLEMENT_COMPLETE.md) to maintain workflow integrity across agent sessions.
  • [EXTERNAL_DOWNLOADS]: References other internal skills within the same plugin architecture (e.g., ds-delegate, ds-handoff, ds-validate) using relative paths from ${CLAUDE_SKILL_DIR}.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 06:29 AM
Security Audit — agent-trust-hub — ds-implement