rpi-implement

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • Structured Implementation Protocol: The skill defines a formal process for executing plans through specific subagents (Implementor, Validator, Researcher) and tracking artifacts in a controlled .copilot-tracking/ directory.
  • Scope Constraints: The instructions explicitly forbid expanding scope beyond the approved phase, which helps prevent unauthorized or accidental modifications to the codebase.
  • Internal Data Isolation: A specific constraint ensures that internal planning artifacts (such as those in .copilot-tracking/) are not referenced in production code, comments, or documentation, maintaining a clear boundary between development meta-data and the shipped product.
  • Validation Enforcement: The protocol requires the use of an 'Implementation Validator' for critical phases or when blockers appear, ensuring that changes meet defined success criteria before review.
  • Safe Handling of External Context: While the skill ingests external plans and research, it implements boundary markers (e.g., specific task slugs and dated paths) and requires human review points via the /rpi-review command.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 09:46 AM
Security Audit — agent-trust-hub — rpi-implement