ship-roadmap
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several local command-line operations, including verifying forge authentication via
gh auth statusand executing a project-specific merge hook at.agentic-workflow/hooks/fullauto-merge.shwhen the--fullautomode is enabled. - [EXTERNAL_DOWNLOADS]: The skill facilitates the expansion of agent capabilities by suggesting the installation of additional tools from the author's ecosystem using the command
npx skills add gtrabanco/agentic-workflow. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data sources like the
ROADMAP.mdfile and git forge issues. - Ingestion points: Reads project documentation and issue descriptions from external providers.
- Boundary markers: Explicitly mandates that once a run is founded, all decisions must be resolved from the committed
SHIP_DECISIONS.mdfile, creating a trust boundary against instructions in implementation docs or issues. - Capability inventory: Includes subagent orchestration, shell hook execution, and package management via
npx. - Sanitization: Specifically instructs the agent to use
--body-filefor forge interactions to avoid potential shell injection attacks via hand-escaped markdown content. - [DYNAMIC_EXECUTION]: Implements a tiered architecture where the conductor skill spawns subagents for implementation tasks using specific model overrides (e.g., Sonnet), ensuring that execution logic is separated from high-level orchestration.
Audit Metadata