product-pipeline

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands (ls, grep, sed, sort) and executes local Go scripts via go run located in ../../scripts/cmd/. These commands are used for state assessment, validation, and dashboard generation as part of the intended product management workflow.
  • [COMMAND_EXECUTION]: Slugs for features are extracted from filenames in the .agents/products/ directory. While these slugs are passed as arguments to shell commands, the use of sed to strip extensions and the nature of the tool as a developer-oriented project manager makes this execution pattern consistent with its primary purpose.
  • [DATA_EXPOSURE]: The skill scans internal project directories (.agents/products/) to build a status dashboard. This access is localized to the project environment and used for progress tracking within the defined pipeline phases.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 04:44 AM