implement
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
child_process.execSyncto invoke standard system utilities for project management. scripts/change-archive.mjsexecutes thezipcommand to archive completed changes into.changes/archive/.scripts/lib/index.mjsexecutesgit rev-parseandgit diffto manage the provenance ofCONTEXT.mdfiles and detect drifted documentation.scripts/context-verify.mjsexecutesnodeto run sibling discovery scripts.- These commands are restricted to the local repository context and are necessary for the skill's primary function as a development workflow orchestrator.
- [INDIRECT_PROMPT_INJECTION]: The review-and-refactor process introduces a surface for indirect prompt injection as subagents analyze the project's source code.
- Ingestion points: Auditor and verifier subagents ingest the implementation diffs and source code files during the review pass (as described in
SKILL.mdandreferences/implementation-review.md). - Boundary markers: The pipeline implements procedural boundaries by requiring fresh subagent contexts for auditor and verifier roles, separate from the implementer.
- Capability inventory: The skill possesses capabilities for file system access, shell command execution (git, zip), and managing project metadata across the repository.
- Sanitization: The
generateChangeIdutility inscripts/lib/index.mjssanitizes user-provided titles to prevent path traversal or command injection when generating directory names and archive paths.
Audit Metadata