implement

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [PERSISTENCE]: The skill uses the CronCreate tool to schedule recurring health checks for implemented features. Specifically, it schedules a task every 6 hours (0 */6 * * *) to check the status of GitHub pull request checks.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided feature descriptions via the $ARGUMENTS variable and interpolates them directly into the prompts for multiple parallel subagents (e.g., backend-system-architect, frontend-ui-developer). This creates a surface where a user's input could attempt to influence subagent behavior, although the skill includes explicit scope containment and verification gates to mitigate this risk.
  • [COMMAND_EXECUTION]: The skill extensively uses the Bash tool to perform git operations (branching, merging, worktree management), run build tools (npm, poetry), and execute test suites (pytest, vitest).
  • [DYNAMIC_EXECUTION]: The skill dynamically spawns and coordinates multiple specialized agents at runtime based on the project tier and feature complexity. It also utilizes shell scripts and node hooks to manage worktree isolation and enforce pattern consistency across generated files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:32 AM