phase-gate

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell utilities including grep, find, ls, head, tail, and xargs to manage workflow states and locate artifact files. These operations are scoped to the .claude/ and project directories to retrieve metadata like 'autonomy-level' and locate phase-specific documents.
  • [PROMPT_INJECTION]: Employs explicit boundary markers to instruct the agent to treat the contents of project artifacts as data for summarization only, preventing the interpretation of embedded markdown or text patterns as instruction overrides.
  • [DATA_EXFILTRATION]: No network operations or external data transfer mechanisms were detected. File access is limited to reading project-internal artifacts for the purpose of review.
  • [REMOTE_CODE_EXECUTION]: No remote script execution or external dependency downloads are present. The skill relies entirely on local file system access and built-in shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 11:27 AM
Security Audit — agent-trust-hub — phase-gate