phase-create

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local CLI commands evolve phases create and evolve phases list to manage pipeline phases. These operations are essential to its primary function and use a local binary as the authoritative enforcement point for validation and file writes.
  • [SAFE]: The skill demonstrates secure shell usage by employing single-quoted heredocs ('SPEC') when passing synthesized JSON configuration to the CLI. This pattern prevents shell interpolation and potential command injection from user-influenced content. The instructions also explicitly prevent the agent from writing to phase directories directly, requiring the use of the validated CLI tool instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 09:07 AM
Security Audit — agent-trust-hub — phase-create