auto-implement

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is authorized to perform sequential execution of implementation and testing tools, as well as local Git operations based on the repository's configuration.
  • Evidence: The 'Persisted task-commit policy' section in SKILL.md outlines the procedure for making local commits following successful task verification.
  • Constraints: Instructions explicitly prohibit modifying global identity configurations, initializing new Git repositories, or pushing changes to remote servers.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided task documents and linked specifications, which represents an ingestion point for data that influences the agent's code generation logic.
  • Ingestion points: Read tasks, linked specs, and relevant sources (SKILL.md).
  • Boundary markers: Implementation is governed by a 'verification and commit policy' and requires explicit resolution of user-action blockers.
  • Capability inventory: Uses 'implement-task' for code changes, 'code-review' for verification, and Git for local version control.
  • Sanitization: Implements a sequential queue with dependency checks and terminal review gates to ensure each implementation cycle is verified before completion.
  • [SAFE]: The skill includes explicit security-conscious instructions for handling sensitive information in the local environment.
  • Evidence: 'references/blocker-readiness.md' instructs the agent to verify the presence of environment variables (e.g., in .env.local) without logging, displaying, or exfiltrating the actual values.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 10:38 AM