opsx-solve-workflow

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a rigorous seven-stage PDCA (Plan-Do-Check-Act) workflow for software development and bug fixing. It focuses on persistent documentation and artifact creation rather than immediate code execution.
  • [SAFE]: The instructions explicitly forbid business code modification during the first four stages (Analysis, Proposal, Review, Plan), ensuring a high level of oversight and preventing accidental or unauthorized changes.
  • [SAFE]: Command execution is restricted to project-local engineering tools such as openspec, git, and standard build/test commands. There are no signs of privilege escalation or access to sensitive system paths.
  • [SAFE]: The skill requires manual user confirmation for key transitions in "manual mode" and enforces strict limits on autonomous behavior (e.g., maximum of 3 review cycles in "automatic mode").
  • [SAFE]: It handles external capabilities ("Superpowers") as progressive enhancements rather than hard dependencies, correctly falling back to internal logic if those skills are not present.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 12:22 PM
Security Audit — agent-trust-hub — opsx-solve-workflow