ship
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Orchestrates repository actions using
git worktree,git push, andgh prcommands to manage feature branches and pull requests autonomously. - [EXTERNAL_DOWNLOADS]: Installs project-specific dependencies using standard package managers (pnpm, npm, yarn) via
npxto maintain environment consistency. - [PROMPT_INJECTION]: Accounts for potential indirect prompt injection by utilizing boundary markers and deterministic state management when processing external inputs like specs and PR feedback.
- Ingestion points: Processes user-provided
SPEC.mdfiles, PR reviewer comments, and CI/CD logs. - Boundary markers: Employs clear delimiters (e.g.,
=== STATE FILES ===) to separate system state from external data. - Capability inventory: Includes git operations, GitHub CLI interactions, and build/test execution.
- Sanitization: Uses
jqfor secure JSON construction in state management scripts to prevent injection into execution artifacts.
Audit Metadata