ship-feature

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands such as grep and ls in references/phase-1-intake.md and references/phase-3-build.md for codebase exploration. These are read-only search operations intended for finding code patterns and existing components.
  • [PROMPT_INJECTION]: The intake phase in references/phase-1-intake.md involves processing user-supplied feature tickets, which presents a surface for indirect prompt injection. The risk is mitigated by the structured multi-phase pipeline and explicit human-in-the-loop gates requiring approval before proceeding.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 03:04 PM
Security Audit — agent-trust-hub — ship-feature