skills/qwenlm/qwen-code/feat-dev/Gen Agent Trust Hub

feat-dev

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill outlines a standard development workflow (Design -> Test -> Implement -> Verify) that focuses on building and testing code within a local project environment.
  • [COMMAND_EXECUTION]: The instructions utilize standard Node.js development commands such as npm run build, npm run typecheck, and node dist/cli.js. These operations are consistent with the skill's stated purpose of feature development for the qwen-code project.
  • [INDIRECT_PROMPT_INJECTION]: The skill presents a surface for processing untrusted data during code exploration and review.
  • Ingestion points: Phase 1 (investigating project docs, issues, and source code) and Phase 7 (triaging code review comments).
  • Boundary markers: None explicitly defined in the workflow instructions.
  • Capability inventory: File system access for implementation, execution of build scripts (npm), and local CLI execution (node, qwen CLI).
  • Sanitization: Not explicitly defined; the workflow relies on a human-in-the-loop self-audit and code review process (Phase 7) to verify changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:32 PM