ship-a-feature
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
ship-check.mjsexecutes shell commands to verify project state. - Evidence: Uses
spawnSyncto rungit add -A,git write-tree, andnpm run check(or a custom command via the--cmdflag). - Evidence: The skill instructions in
SKILL.mdprompt the agent to runnpm run buildand theship-check.mjsscript. - [DYNAMIC_EXECUTION]: The skill performs runtime inspection of project modules.
- Evidence: Uses
await import()inscripts/ship-check.mjsto dynamically load build artifacts resolved frompackage.jsonexports. - Evidence: Uses dynamic regular expressions to search for symbols in source code and documentation.
Audit Metadata