phase-contract-workflow
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/planctlutility executes shell commands defined in the project'splan/manifest.yamlfile. These commands are used as 'quality gates' to verify the success of a phase (e.g., running build scripts or test suites) before advancing the workflow. This functionality is the primary intended use of the skill.\n- [DATA_EXFILTRATION]: Thecompletecommand in thescripts/planctlscript performs an automated milestone process consisting ofgit add -A,git commit, andgit push. This provides repository-backed persistence for the project's state. While this involves sending project data to a remote server, it is a core feature for collaborative and long-running workflows. The skill includes robust instructions for the agent to maintain the project's.gitignorefile to mitigate the risk of accidentally staging sensitive information.\n- [PROMPT_INJECTION]: The skill includes extensive agent instructions (e.g., inreferences/agent-instructions-template.md) that are synchronized across multiple files (CLAUDE.md,AGENTS.md,.github/copilot-instructions.md). These instructions enforce a 'Three-File Context Law' and other operational constraints designed to prevent state drift and context contamination. This is a legitimate application of instructional steering for workflow stability and does not involve bypassing safety guidelines.
Audit Metadata