ce-work
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs standard Git operations (including
git pull,git checkout, andgit commit) and utilizes the GitHub CLI (gh) for issue management. These operations are integrated into the feature development workflow and are restricted to the local repository context. - [REMOTE_CODE_EXECUTION]: The skill dispatches tasks to subagents using platform-specific mechanisms like the
Agenttool. This is a common architectural pattern for complex agent workflows to manage context and provide task isolation. - [PROMPT_INJECTION]: The skill processes external plans and user prompts via the
<input_document>boundary. It implements a multi-phase triage and clarification process inSKILL.mdto validate requirements before execution, which serves as a safeguard against malicious instructions in the input data. - Ingestion points: External work descriptions or plan files enter the context via the
input_documentargument inSKILL.md. - Boundary markers: The skill uses XML-style
<input_document>tags to delimit untrusted input. - Capability inventory: The skill has the capability to execute shell commands (git, gh), modify files, and spawn subagents.
- Sanitization: Initial triage (Phase 0) and clarification (Phase 1) steps are used to interpret requirements and confirm scope with the user.
Audit Metadata