dev-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill implements a structured software development lifecycle (SDLC) workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user input during requirements and design phases (stages 1, 2, 4, 7). To mitigate injection risks, the instructions mandate using structured, numbered options for user choices instead of unrestricted free-text input for critical decision points.
- [COMMAND_EXECUTION]: The skill uses tools like Read, Write, Grep, and Glob to manage project documentation in the
docs/directory. These operations are scoped to project management tasks and do not involve arbitrary command execution or privilege escalation.
Audit Metadata