frontend-implement
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses Git commands to create and verify isolated worktrees, ensuring that concurrent development tasks do not conflict in the same working directory.
- [COMMAND_EXECUTION]: Executes a local Python script (
engine/validate_tasks.py) to validate the schema and integrity of the task definition file before implementation begins. - [COMMAND_EXECUTION]: Invokes verification tools via
/verifyto run linters, type-checkers, and test suites, confirming the quality and correctness of the frontend changes. - [SAFE]: Explicitly requires compliance with security standards, including the prevention of XSS, proper handling of PII in logs, and the exclusion of secrets from client-side code.
- [SAFE]: Indirect prompt injection risk is mitigated during data ingestion: (1) Ingestion points: Reads tasks.json and contract files from the filesystem. (2) Boundary markers: Uses === path === delimiters for batch loading to separate file contents. (3) Capability inventory: Utilizes Bash, Edit, Write, and Task tools to perform code modifications and spawn subagents. (4) Sanitization: Performs pre-execution validation via engine/validate_tasks.py to ensure the task schema and structure are valid.
Audit Metadata