autopilot-issue-delivery-scheduler
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Process Control and Accountability: The skill implements a mandatory 'Activation card' and 'Queue table' before execution. This ensures that every operation is documented with a clear rationale and intent, providing transparency in how issues are selected and dispatched.
- Write Restriction Enforcement: A core security feature of this skill is the explicit requirement for
write: off. The instructions mandate that the skill must stop execution if write access is enabled, ensuring it remains a read-only scheduler and reducing the risk of unauthorized repository changes. - Label-Based Authorization: The skill uses specific GitHub labels, such as
status/accepted, as a hard gate for eligibility. This ensures that only issues previously reviewed and authorized by a human maintainer are added to the implementation queue. - Isolated Concurrency Management: The 'Fan-out pool' design isolates concurrent worker sessions. By limiting the number of active slots and preventing pool sharing between different scheduler types, the skill maintains clear boundaries and prevents resource contention or cross-task interference.
- Standard Tooling Integration: The skill utilizes standard GitHub CLI commands (
gh issue list) to interact with repository data. This is a standard and expected method for agentic workflows to retrieve project metadata within their authorized scope.
Audit Metadata