autonomous-workflow

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses Git worktrees to isolate autonomous work from the main codebase, preventing accidental data loss or corruption in the user's primary working environment.
  • [SAFE]: Prerequisite tools (gh and gw) are standard development utilities. The installation process is transparent and involves user-initiated shell scripts and package managers.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscated code was found across the analyzed files. All external links point to official documentation (Anthropic, Google, Claude) or the author's verified repositories.
  • [SAFE]: The workflow incorporates multiple safety gates, specifically the confidence(plan) gate at Phase 1, which requires a high threshold (90%) and user approval before implementation begins.
  • [SAFE]: The install.sh script is well-documented and performs standard setup tasks like creating symlinks in the local .claude directory without requiring elevated privileges or executing hidden remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 09:36 AM