implement
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill uses the
CronCreatetool to schedule recurring health checks for implemented features. Specifically, it schedules a task every 6 hours (0 */6 * * *) to check the status of GitHub pull request checks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided feature descriptions via the
$ARGUMENTSvariable and interpolates them directly into the prompts for multiple parallel subagents (e.g., backend-system-architect, frontend-ui-developer). This creates a surface where a user's input could attempt to influence subagent behavior, although the skill includes explicit scope containment and verification gates to mitigate this risk. - [COMMAND_EXECUTION]: The skill extensively uses the
Bashtool to perform git operations (branching, merging, worktree management), run build tools (npm, poetry), and execute test suites (pytest, vitest). - [DYNAMIC_EXECUTION]: The skill dynamically spawns and coordinates multiple specialized agents at runtime based on the project tier and feature complexity. It also utilizes shell scripts and node hooks to manage worktree isolation and enforce pattern consistency across generated files.
Audit Metadata