ship-it
Warn
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill dynamically spawns and configures worker agents or models at runtime based on external configuration.
references/delegation.md: Describes a 'Dispatch Contract' where the orchestrator spawns agents by name or model ID retrieved from akickoff.yamlfile.references/delegation.md: Includes logic to discover, select, and store harness-native agent names and model settings, which are subsequently used for execution.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from multiple sources, which could contain malicious instructions.
- Ingestion points: Reads engineering briefs, accepted plans, worktree content, and results returned by worker agents (in
SKILL.mdandreferences/delegation.md). - Capability inventory: Performs file writes during implementation, spawns worker agents, creates pull requests, and executes the
forestCLI tool for closeout. - Boundary markers: Instructions require the orchestrator to 'Inspect every worker diff' and 'Run integrated repository/acceptance validation' to verify outcomes.
- Sanitization: Includes instructions to record hashes and names without printing secret contents during closeout.
- [COMMAND_EXECUTION]: The skill invokes external command-line tools to manage repository state and task completion.
SKILL.md: Specifically invokesforest close,git ls-files,git worktree list, andcreate-prto finalize implementation and delivery.
Audit Metadata