📦
git-workflow
78تشغيل سير عمل Git متسق
بواسطة Doyajin174
يمكن أن ينحرف عمل Git إلى التزامات غير واضحة وتحقق فائت. ترشد هذه المهارة إلى الالتزامات التقليدية، وتسمية الفروع، والفحوصات، والتحضير للدفع.
DevOps والبنية التحتية عرض
المهارات agy-worker
📦
agy-worker
v0.21.0 مراجعة المحتوى r8 مخاطر عالية ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات⚡ يحتوي على سكربتات🔑 متغيرات البيئة
Delegate Repository Work Safely
Repository delegation can consume time and make verification inconsistent. This skill sends bounded work to agy, then keeps review, checks, repair, and acceptance with Codex.
يدعم: Codex
توقف واطلب التأكيد قبل التثبيت.
راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "agy-worker" from https://skillstore.io/skills/cagdasyurekli-agy-worker.md and its manifest at https://skillstore.io/api/skills/cagdasyurekli-agy-worker/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "agy-worker". Explore the authentication flow and identify the files that handle token validation.
النتيجة المتوقعة:
- Mapped the authentication entry points and token validation path.
- Listed evidence files and marked unverified assumptions for Codex review.
جارٍ استخدام "agy-worker". Add parser error-path tests under tests/parser and verify the change.
النتيجة المتوقعة:
- Implemented the focused tests within the approved path.
- Ran the relevant test command and reported the final candidate status.
جارٍ استخدام "agy-worker". Audit the repository workflow and repair bounded failures.
النتيجة المتوقعة:
Returned a structured project result with the candidate diff, verification evidence, remaining limits, and delivery recommendation.
التدقيق الأمني
مخاطر عاليةv8 • ٢٠/٩/٢٠٢٦ فتح التقرير المرتبط بالإصدار
Most static matches are benign implementation, validation, documentation, schema, or control-character checks. Confirmed risks include provider and verifier execution, environment inheritance, keychain handling, settings access, and non-sandboxed provider authority. Static review was capped at 400/991 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
92
الملفات التي تم فحصها
39,230
الأسطر التي تم تحليلها
50
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (7)
مرتفع
Certificate/key files
keychain_path=prepared.keychain.path if prepared.keychain is not None else None,
The code binds a prepared keychain path or keychain preferences file, which is a sensitive-resource capability. It is used for native isolation, but compromise of the boundary could expose credential material.
مرتفع
Certificate/key files
if prepared.keychain is None or prepared.keychain_preferences is None:
The code binds a prepared keychain path or keychain preferences file, which is a sensitive-resource capability. It is used for native isolation, but compromise of the boundary could expose credential material.
مرتفع
Certificate/key files
if _bind_keychain(prepared.keychain.path) != prepared.keychain:
The code binds a prepared keychain path or keychain preferences file, which is a sensitive-resource capability. It is used for native isolation, but compromise of the boundary could expose credential material.
مرتفع
Certificate/key files
prepared.keychain_preferences.path, modes={0o600}, limit=MAX_PROFILE_BYTES,
The code binds a prepared keychain path or keychain preferences file, which is a sensitive-resource capability. It is used for native isolation, but compromise of the boundary could expose credential material.
مرتفع
Certificate/key files
) != prepared.keychain_preferences:
The code binds a prepared keychain path or keychain preferences file, which is a sensitive-resource capability. It is used for native isolation, but compromise of the boundary could expose credential material.
مرتفع
Certificate/key files
prepared.keychain is not None or prepared.keychain_preferences is not None
The code binds a prepared keychain path or keychain preferences file, which is a sensitive-resource capability. It is used for native isolation, but compromise of the boundary could expose credential material.
مرتفع
External Provider Transmission Without Host Isolation
The skill can transmit a whole disposable worktree to Google or Gemini, while default session mode retains normal user filesystem and network authority without host containment.
The documented workflow explicitly states both the external transmission boundary and the lack of sandbox or native containment in default session mode.
عناصر مراجعة القدرات (50)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
مرتفع
Hidden file in home directory
p = os.path.expanduser("~/.gemini/antigravity-cli/settings.json")
The account-phase helper expands and reads the user settings file under ~/.gemini. This accesses provider configuration that may contain sensitive permissions or account settings.
مرتفع
Process spawn
return spawn(job, "initial", resume=False, foreground=True)
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Process spawn
return spawn(job, "initial", resume=False, foreground=False)
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Process spawn
return spawn(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Process spawn
return spawn(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python os.exec variants
os.execvpe(command[0], command, dict(os.environ))
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
child = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
controller_process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(argv, cwd=cwd, env=git_env(), stdin=subprocess.DEVNULL, stdout=subprocess
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.Popen
process = subprocess.Popen(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
return subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
provider_checked = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
canonical_checked = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
result = subprocess.run(command, cwd=cwd, env=git_env(), stdin=subprocess.DEVNULL, stdout=subprocess
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
completed = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
completed = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
proc = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
proc = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
proc = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
proc = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
return subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
proc = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
proc = subprocess.run(verify_cmd, check=False)
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
مرتفع
Python subprocess.run
fin_proc = subprocess.run(
The runtime launches provider, Git, or verification processes. This is required by the skill, but it creates a real command-execution boundary that must remain approval-bound.
متوسط
Hidden file access
p = os.path.expanduser("~/.gemini/antigravity-cli/settings.json")
The account-phase helper expands and reads the user settings file under ~/.gemini. This accesses provider configuration that may contain sensitive permissions or account settings.
متوسط
Unix shell invocation
/bin/bash -c "${verify_specs[$i]}"
The verifier invokes a shell or defines a shell supervisor. Shell execution can run arbitrary commands, so this is a real execution boundary even with the documented controls.
متوسط
Unix shell invocation
/bin/bash -c "${verify_specs[$i]}"
The verifier invokes a shell or defines a shell supervisor. Shell execution can run arbitrary commands, so this is a real execution boundary even with the documented controls.
متوسط
Unix shell invocation
SCRIPT_SHELLS = frozenset({"/bin/bash", "/bin/sh"})
The verifier invokes a shell or defines a shell supervisor. Shell execution can run arbitrary commands, so this is a real execution boundary even with the documented controls.
متوسط
Unix shell invocation
"/bin/sh", "-c", supervisor, "bounded-git-supervisor",
The verifier invokes a shell or defines a shell supervisor. Shell execution can run arbitrary commands, so this is a real execution boundary even with the documented controls.
متوسط
Unix shell invocation
"/bin/bash",
The verifier invokes a shell or defines a shell supervisor. Shell execution can run arbitrary commands, so this is a real execution boundary even with the documented controls.
منخفض
Python environment access
environment = os.environ.copy()
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
if name in os.environ:
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
(os.fsencode(name), b"\0", os.fsencode(os.environ[name]), b"\0")
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
os.execvpe(command[0], command, dict(os.environ))
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
environment = os.environ.copy()
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
environment = {name: os.environ[name] for name in allowed if name in os.environ}
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
configured = os.environ.get("XDG_STATE_HOME")
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
home_text = os.environ.get("HOME")
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
environment = dict(os.environ)
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
env = dict(os.environ)
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
os.environ.get("AGY_WORKER_LOG_DIR") or (state_path.parent / "logs")
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
منخفض
Python environment access
os.environ.get("AGY_WORKER_LOG_DIR") or (SCRIPTS.parent / "logs")
The code reads or copies the process environment for child execution. Environment variables can contain credentials, so filtering must remain complete and approval-bound.
عوامل الخطر
⚙️ الأوامر الخارجية (50)
README.md:56 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:71 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:80 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:81 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:82 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:252 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:253 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:287 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:288-290 runtime/agy-worker.sh:14 runtime/agy-worker.sh:15 runtime/agy-worker.sh:1262 runtime/agy-worker.sh:1263 runtime/agy-worker.sh:1300 runtime/agy-worker.sh:25 runtime/agy-worker.sh:30 runtime/agy-worker.sh:237 runtime/agy-worker.sh:464 runtime/agy-worker.sh:473-475 runtime/agy-worker.sh:497 runtime/agy-worker.sh:498 runtime/agy-worker.sh:499 runtime/agy-worker.sh:603 runtime/agy-worker.sh:604 runtime/agy-worker.sh:649 runtime/agy-worker.sh:650 runtime/agy-worker.sh:651 runtime/agy-worker.sh:652 runtime/agy-worker.sh:663 runtime/agy-worker.sh:685 runtime/agy-worker.sh:690 runtime/agy-worker.sh:692 runtime/agy-worker.sh:696 runtime/agy-worker.sh:720-725 runtime/agy-worker.sh:901-906 runtime/agy-worker.sh:980 runtime/agy-worker.sh:1009-1011 runtime/agy-worker.sh:1043-1054 runtime/agy-worker.sh:1225 runtime/agy-worker.sh:1226 runtime/agy-worker.sh:1306 runtime/agy-worker.sh:15-1262 runtime/benchmark.sh:5 runtime/codex-usage-report.sh:5 runtime/delegation-policy.sh:5 runtime/doctor.sh:21 runtime/doctor.sh:32 runtime/doctor.sh:37-38 runtime/doctor.sh:85-86 runtime/doctor.sh:146-147
🌐 الوصول إلى الشبكة (43)
references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:25 runtime/compat/agy-version-manifest.json:20 runtime/compat/agy-version-manifest.json:64 runtime/compat/agy-version-manifest.json:111 runtime/compat/agy-version-manifest.json:163 runtime/compat/agy-version-manifest.json:212 runtime/compat/agy-version-manifest.json:257 runtime/compat/agy-version-manifest.json:277 runtime/compat/agy-version-manifest.json:303 runtime/compat/agy-version-manifest.json:347 runtime/compat/model-effort-matrix.schema.json:2 runtime/compat/model-effort-matrix.schema.json:3 runtime/compat/version-manifest.schema.json:2 runtime/schemas/benchmark-plan.schema.json:1 runtime/schemas/benchmark-result.schema.json:1 runtime/schemas/delegation-policy.schema.json:2 runtime/schemas/evidence-receipt.schema.json:2 runtime/schemas/job-state.schema.json:2 runtime/schemas/model-evidence-campaign-advisory-preview.schema.json:2 runtime/schemas/model-evidence-campaign-advisory-summary.schema.json:2 runtime/schemas/model-evidence-campaign-aggregate-preview.schema.json:2 runtime/schemas/model-evidence-campaign-aggregate.schema.json:2 runtime/schemas/model-evidence-campaign-evaluation.schema.json:2 runtime/schemas/model-evidence-campaign-plan.schema.json:2 runtime/schemas/model-evidence-campaign-record.schema.json:2 runtime/schemas/model-evidence-campaign-record.schema.json:156 runtime/schemas/model-intelligence-advisory.schema.json:2 runtime/schemas/model-intelligence-evidence.schema.json:2 runtime/schemas/model-intelligence-evidence.schema.json:85 runtime/schemas/model-recommendation.schema.json:2 runtime/schemas/model-selection.schema.json:2 runtime/schemas/swebench-workflow-study-advisory.schema.json:1 runtime/schemas/swebench-workflow-study-report.schema.json:1 runtime/schemas/worker-result.provider.schema.json:2 runtime/schemas/worker-result.schema.json:2 runtime/schemas/workflow-state.schema.json:2 runtime/scripts/codex_usage_report.py:726 runtime/scripts/compatibility.py:245 runtime/scripts/compatibility.py:246 runtime/scripts/feedback-triage.py:31 runtime/scripts/model_evidence_campaign.py:28 runtime/scripts/model_intelligence.py:26 SKILL.md:36
📁 الوصول إلى نظام الملفات (50)
references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:81 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:82 references/PROJECT_LIFECYCLE_AND_VERIFICATION.md:252 references/SECURITY_AND_COMPATIBILITY.md:213 references/SECURITY_AND_COMPATIBILITY.md:42 runtime/agy-worker.sh:1262 runtime/agy-worker.sh:1262 runtime/agy-worker.sh:237 runtime/agy-worker.sh:663 runtime/agy-worker.sh:673 runtime/agy-worker.sh:685 runtime/agy-worker.sh:897 runtime/agy-worker.sh:1011 runtime/agy-worker.sh:1030 runtime/agy-worker.sh:1200 runtime/agy-worker.sh:1201 runtime/agy-worker.sh:939 runtime/doctor.sh:21 runtime/doctor.sh:24 runtime/doctor.sh:32 runtime/doctor.sh:38 runtime/doctor.sh:86 runtime/doctor.sh:147 runtime/doctor.sh:156 runtime/doctor.sh:157 runtime/doctor.sh:172 runtime/doctor.sh:198 runtime/doctor.sh:199 runtime/doctor.sh:225 runtime/doctor.sh:230 runtime/doctor.sh:231 runtime/doctor.sh:237 runtime/doctor.sh:252 runtime/doctor.sh:253 runtime/doctor.sh:301 runtime/doctor.sh:302 runtime/doctor.sh:304 runtime/doctor.sh:315 runtime/doctor.sh:322 runtime/doctor.sh:468 runtime/doctor.sh:470 runtime/doctor.sh:478 runtime/doctor.sh:479 runtime/doctor.sh:493 runtime/doctor.sh:506 runtime/doctor.sh:527 runtime/doctor.sh:543 runtime/doctor.sh:563 runtime/doctor.sh:579 runtime/doctor.sh:224
⚡ يحتوي على سكربتات (22)
runtime/agy-worker.sh:1435 runtime/agy-worker.sh:1436 runtime/agy-worker.sh:1448 runtime/agy-worker.sh:1451 runtime/agy-worker.sh:1462 runtime/agy-worker.sh:1493 runtime/scripts/agy_dispatch_containment.py:809-810 runtime/scripts/agy_dispatch_worktree.py:971 runtime/scripts/agy_dispatch_worktree.py:4548 runtime/scripts/agy_dispatch.py:2998 runtime/scripts/agy_dispatch.py:46 runtime/scripts/agy_dispatch.py:3292 runtime/scripts/benchmark.py:88-96 runtime/scripts/benchmark.py:97-100 runtime/scripts/evidence_receipt.py:29-37 runtime/scripts/evidence_receipt.py:38-41 runtime/scripts/evidence_report.py:25-34 runtime/scripts/evidence_report.py:35-38 runtime/scripts/job_lifecycle.py:35-38 runtime/scripts/job_lifecycle.py:39-44 runtime/scripts/job_lifecycle.py:45-54 runtime/scripts/model-recommendation.py:12-18
🔑 متغيرات البيئة (15)
runtime/qa-gate.sh:120 runtime/scripts/agy_dispatch_verification.py:151 runtime/scripts/agy_dispatch_worktree.py:1676 runtime/scripts/evidence_receipt.py:1115 runtime/scripts/evidence_receipt.py:1117 runtime/scripts/evidence_receipt.py:1521 runtime/scripts/evidence_receipt.py:955 runtime/scripts/feedback-triage.py:360 runtime/scripts/model_selection.py:98 runtime/scripts/workflow.py:764 runtime/scripts/workflow.py:771 runtime/scripts/workflow.py:803 runtime/scripts/workflow.py:1168 runtime/scripts/workflow.py:1242 runtime/scripts/workflow.py:1667
دقّقه: codex عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/cagdasyurekli-agy-worker/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/cagdasyurekli-agy-worker?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/cagdasyurekli-agy-worker?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cagdasyurekli-agy-worker/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/cagdasyurekli-agy-worker.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
cagdasyurekli. (2026). agy-worker security audit report (audit version 8) [Author version 0.21.0]. Skillstore. https://skillstore.io/skills/cagdasyurekli-agy-worker/audits/8اقتباس BibTeX
@techreport{cagdasyurekli-cagdasyurekli-agy-worker-2026,
author = {cagdasyurekli},
title = {agy-worker security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/cagdasyurekli-agy-worker/audits/8},
note = {Author version 0.21.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agy-worker security audit report (audit version 8)"
version: "0.21.0"
type: report
authors:
- name: "cagdasyurekli"
date-released: "2026-09-20"
url: "https://skillstore.io/skills/cagdasyurekli-agy-worker/audits/8"
identifiers:
- type: other
value: "skillstore:cagdasyurekli-agy-worker:audit:8"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 82
الهندسة المعمارية
100
قابلية الصيانة
87
المحتوى
67
المجتمع
91
الامتثال للمواصفات
ما الذي يمكنك بناؤه
Explore an unfamiliar repository
Ask agy to map code paths or investigate a focused question, then review the evidence with Codex.
Implement a bounded change
Delegate a feature, refactor, or test change within an approved scope and verify the resulting diff independently.
Run a broad project workflow
Use project mode for larger audits or repairs while preserving review, checks, and delivery decisions with Codex.
جرّب هذه الموجّهات
Start a repository exploration
Use agy-worker to inspect the repository and explain the code paths related to [topic]. Read only the approved scope and report evidence.
Implement a focused task
Use agy-worker to implement [change] under [paths]. Preserve existing behavior, run relevant checks, and summarize the final diff.
Verify a delegated change
Use agy-worker to review the candidate for [task]. Run independent checks, identify gaps, and repair only within the approved scope.
Run a controlled project workflow
Use agy-worker project mode for [objective]. Require approved provider scope, explicit model and budget, independent verification, and an evidence-based delivery decision.
أفضل الممارسات
- Approve the exact provider-readable content, model, budget, and isolation mode before launch.
- Prefer provider scopes and argv verification, then inspect the final diff independently.
- Keep secrets, raw logs, controller state, and unrelated private files outside approved content.
تجنب
- Do not treat installation as permission to transmit repository content.
- Do not trust worker envelopes, reported tests, or provider claims without independent checks.
- Do not use whole-worktree or shell verification modes without explicit scope and risk approval.
الأسئلة المتكررة
What does agy-worker delegate?
It delegates repository exploration, implementation, testing, and bounded repair to Google Antigravity CLI.
What remains with Codex?
Codex retains scope decisions, diff review, independent verification, repair decisions, and final acceptance.
Does the skill transmit repository files?
It can transmit approved scoped files or an explicitly approved whole worktree to the external provider.
Is the provider session a sandbox?
No. Default session mode retains normal user filesystem and network authority without native host containment.
Which hosts are supported?
The package supports OpenAI Codex CLI hosts with Bash, Python 3, Git, and agy available.
How should I verify results?
Inspect the actual diff and run driver-owned checks in an isolated verification copy before delivery.
تفاصيل المطور
المؤلف
cagdasyurekliالترخيص
MIT
إصدار المؤلف
v0.21.0
مراجعة Skillstore
r8
مرجع
73b58aaf0aa4d29844f1b4c2acf4f530fc1ae7b9
حداثة الصيانة
٢٠/٩/٢٠٢٦
الاستخدام
6 تنزيلات · 18 مشاهدات
بنية الملفات
📁 agents/
📄 PROJECT_LIFECYCLE_AND_VERIFICATION.md
📄 SECURITY_AND_COMPATIBILITY.md
📁 runtime/
📁 agents/
📁 v1/
📁 tasks/
📁 compat/
📄 agy-model-effort-matrix.json
📄 agy-model-effort-matrix.sha256
📄 agy-models-inventory-binding.json
📄 agy-models-inventory-binding.sha256
📄 model-effort-matrix.schema.json
📄 version-manifest.schema.json
📄 job.sh
📁 schemas/
📄 benchmark-result.schema.json
📄 delegation-policy.schema.json
📄 evidence-receipt.schema.json
📄 model-evidence-campaign-advisory-preview.schema.json
📄 model-evidence-campaign-advisory-summary.schema.json
📄 model-evidence-campaign-aggregate-preview.schema.json
📄 model-evidence-campaign-aggregate.schema.json
📄 model-evidence-campaign-evaluation.schema.json
📄 model-evidence-campaign-plan.schema.json
📄 model-evidence-campaign-record.schema.json
📄 model-intelligence-advisory.schema.json
📄 model-intelligence-evidence.schema.json
📄 model-recommendation.schema.json
📄 swebench-workflow-study-advisory.schema.json
📄 swebench-workflow-study-plan.schema.json
📄 swebench-workflow-study-report.schema.json
📄 worker-result.provider.schema.json
📁 scripts/
📄 agy_dispatch_verification.py
📁 scripts/
📄 SKILL.md
مهارات ذات صلة
عرض الكل📦
ariadne-loop
81إنشاء مواصفات حلقات وكلاء قابلة للتحقق
بواسطة zhangzeyu99-web
غالبا ما تنحرف مهام وكلاء البرمجة الغامضة، أو تكرر العمل، أو تتوقف دون إثبات. تحول هذه المهارة الطلبات إلى مواصفات حلقات محددة بمدققات، وقواعد توقف، وحزم تسليم.
البرمجة والتطوير عرض
📦
verification-protocol
80التحقق من إكمال الوكيل بالأدلة
بواسطة CleanExpo
يمكن لوكلاء الذكاء الاصطناعي وضع علامة على العمل بأنه مكتمل من دون دليل، مما يخلق خطر الإكمال الزائف. تتطلب هذه المهارة أدلة مستقلة قبل قبول إكمال المهمة.
الإنتاجية عرض
📦
plan-writing
79إنشاء خطط تنفيذ مركّزة
بواسطة sickn33
قد يصبح العمل البرمجي متعدد الخطوات غامضًا وكبيرًا وصعب التحقق. تساعد هذه المهارة Claude وCodex وClaude Code على إنشاء خطط قصيرة بمهام واضحة وترتيب وفحوصات.
البرمجة والتطوير عرض
📦
executing-plans
79تنفيذ خطط التطبيق مع نقاط تحقق
بواسطة obra
يمكن أن تفقد خطط التطبيق تركيزها عندما ينتقل العمل إلى جلسة AI منفصلة. ترشد هذه المهارة Claude وCodex وClaude Code خلال التنفيذ على دفعات، والتحقق، ونقاط مراجعة التقدم.
البرمجة والتطوير عرض
📦
verification-before-completion
79تحقق من ادعاءات الإكمال قبل الإبلاغ
بواسطة CodingCossack
قد تكون ادعاءات الإكمال خاطئة عندما يعتمد الوكلاء على الذاكرة أو الثقة. تتطلب هذه المهارة أدلة حديثة قبل الإبلاغ عن النجاح.
البرمجة والتطوير عرض