autonomous-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCEEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies extensively on the Bash tool for critical developer operations, including worktree management (using 'gw' or native 'git worktree'), dependency installation, and running the project's build and test suites. It also executes custom shell commands defined in the 'checks.yaml' artifact to mechanically verify that acceptance criteria are met during the testing phase. These operations are intended and fundamental to the skill's role as an automated coding assistant.
  • [DYNAMIC_EXECUTION]: During the planning and UI verification phases, the skill dynamically generates Playwright test scripts ('last-run.spec.ts') and 'checks.yaml' configuration files containing executable commands. These scripts are subsequently executed to automate the validation of code changes against user goals. This dynamic generation and execution of code is a core feature of the workflow's automation model.
  • [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting data from external and potentially untrusted sources, such as pull request comments (used to locate preview URLs) and existing codebase files during research phases. It also interacts with LoreKit persistent memory across different runs. While this ingestion represents a theoretical attack surface for indirect prompt injection, the skill includes explicit instructions to avoid storing sensitive data in memory and utilizes targeted extraction methods like specific regular expressions for URLs to mitigate risks.
  • [PERSISTENCE]: The skill provides an 'install.sh' script that automates the setup of its dispatcher, planner, executor, and tester agents. This script creates persistent symlinks in the user's Claude configuration directory ('~/.claude/'), allowing the autonomous workflow to be discovered and triggered automatically in future sessions based on natural language keywords.
  • [EXTERNAL_DOWNLOADS]: The skill is configured to automatically resolve and install the Playwright browser automation tool from the official NPM registry if it is not found in the project's environment. This installation ensures that UI verification can proceed autonomously. These downloads are performed from well-known, trusted package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:23 PM