do-scoped
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local testing commands such as
pytestandnode --testwithin the development environment to verify code changes based on the implementation plan. - [SAFE]: The skill implements a robust human-in-the-loop security model, requiring explicit approval markers (e.g., '> 状态：已批准') in specification files before any code modification or implementation begins.
- [SAFE]: Analysis of the indirect prompt injection surface: 1. Ingestion points: Reads external data from specification files in
docs/scope/or conversation history; 2. Boundary markers: Enforces the presence of a specific approval status line; 3. Capability inventory: Performs local file writes and executes test-related shell commands; 4. Sanitization: Relies on mandatory human review and approval of the source content before it is accepted for execution.
Audit Metadata