skills/panda850819/verbs/sprint/Gen Agent Trust Hub

sprint

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill architecture incorporates mandatory review and verification stages, ensuring that no code is shipped without passing both automated checks and human-in-the-loop gates.
  • [SAFE]: Stage 4 (Review) serves as a mandatory gate where all code must pass P0/P1 quality checks, preventing the progression of flawed or unauthorized changes to the production environment.
  • [COMMAND_EXECUTION]: The skill uses standard command-line tools like git, find, and rg for repository management and context gathering, and it constructs controlled execution commands for delegating mechanical tasks to a sandboxed environment.
  • [SAFE]: The execution logic enforces architect-level verification of all automated build units, explicitly stating that subagent-reported success is not trusted until it is re-verified by the main session through acceptance tests.
  • [SAFE]: The skill manages potential indirect prompt injection by using durable plan files as read-only decision artifacts and deriving progress from actual git state and acceptance tests rather than trusting metadata.
  • [SAFE]: Delegation to external runtimes like Codex is protected by a requirement for explicit user opt-in and clean-baseline preflight checks, maintaining host ownership of all sensitive operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 02:27 AM
Security Audit — agent-trust-hub — sprint