implement

Pass

Audited by Gen Agent Trust Hub on Aug 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses child_process.execSync to invoke standard system utilities for project management.
  • scripts/change-archive.mjs executes the zip command to archive completed changes into .changes/archive/.
  • scripts/lib/index.mjs executes git rev-parse and git diff to manage the provenance of CONTEXT.md files and detect drifted documentation.
  • scripts/context-verify.mjs executes node to run sibling discovery scripts.
  • These commands are restricted to the local repository context and are necessary for the skill's primary function as a development workflow orchestrator.
  • [INDIRECT_PROMPT_INJECTION]: The review-and-refactor process introduces a surface for indirect prompt injection as subagents analyze the project's source code.
  • Ingestion points: Auditor and verifier subagents ingest the implementation diffs and source code files during the review pass (as described in SKILL.md and references/implementation-review.md).
  • Boundary markers: The pipeline implements procedural boundaries by requiring fresh subagent contexts for auditor and verifier roles, separate from the implementer.
  • Capability inventory: The skill possesses capabilities for file system access, shell command execution (git, zip), and managing project metadata across the repository.
  • Sanitization: The generateChangeId utility in scripts/lib/index.mjs sanitizes user-provided titles to prevent path traversal or command injection when generating directory names and archive paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 16, 2026, 01:30 PM
Security Audit — agent-trust-hub — implement