agent-protocol

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The file contains instructions for agent behavior within a software repository. It mandates the use of git worktrees for task isolation, prescribes the maintenance of worklogs in an ephemeral directory, and defines specific pull request and merging procedures. These are standard development practices.
  • [DATA_EXPOSURE]: The skill instructs the agent to store 'downloaded artifacts' within the ephemeral/ directory, which is noted as tracked working material. While this defines a storage convention, users should be aware that if an agent downloads sensitive data into this directory, it may be committed to the repository history depending on git configuration.
  • [COMMAND_EXECUTION]: The instructions direct the agent to perform various git operations (e.g., fast-forwarding, squash-merging, deleting worktrees) and manage background processes. These are expected capabilities for an agent tasked with repository maintenance and do not involve arbitrary or obfuscated command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 04:56 PM