Habilidades invoking-agents

📦

invoking-agents

Name: invoking-agents
Author: drix10

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos

Orchestrate Issues Through Review and QA

Multi-agent issue delivery can lose state, mix roles, and skip safeguards. This skill coordinates implementation, review, QA, escalation, and pull request creation through agent-flow.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "invoking-agents" from https://skillstore.io/skills/drix10-invoking-agents.md and its manifest at https://skillstore.io/api/skills/drix10-invoking-agents/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/drix10-invoking-agents.md Manifest firmado GET /api/skills/drix10-invoking-agents/manifest Lockfile firmado GET /api/skills/drix10-invoking-agents/lockfile

Pruébalo

Usando "invoking-agents". Implement issue #42 and open a pull request.

Resultado esperado:

Issue #42 completed. Implementation, review, and QA passed. Pull request #108 was opened from the issue branch.

Usando "invoking-agents". Run issue #57 through the pipeline.

Resultado esperado:

Issue #57 needs a human decision because the acceptance criteria conflict. The decision brief includes the exact ambiguity and attempted resolution.

Usando "invoking-agents". Process issues #60 and #61 in parallel.

Resultado esperado:

Issue #60 started in its own worktree.
Issue #61 was serialized because both classifications include the same file.

Auditoría de seguridad

Riesgo alto

v1 • 27/9/2026 Abrir el informe versionado

The 81 static alerts are false positives caused by Markdown formatting, safe documentation references, or fixed workflow checks. Two semantic risks remain: unconfined implementer processes and unsafe shell interpolation of an untrusted issue title.

Archivos escaneados

200

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (2)

Alto

SKILL.md:49-78

Unconfined Implementer Processes

Claude and Codex implementers run without enforced worktree confinement while processing untrusted issue content. Environment variables and prompts are advisory, so a compromised agent could modify files outside the worktree.

The skill explicitly states that Claude and Codex lack worktree confinement and recommends an external container or sandbox. Their launch commands do not enforce that boundary.

Alto

SKILL.md:159-160

Untrusted Issue Title Interpolated Into Shell Command

The pull request command places the untrusted issue title inside a double-quoted shell argument. Shell substitutions within a title could execute unless the value is escaped or passed without shell parsing.

The skill declares issue text untrusted, then shows the issue title substituted into a shell command. Double quotes do not suppress shell command substitution.

Factores de riesgo

⚙️ Comandos externos (50)

🌐 Acceso a red (1)

SKILL.md:113

📁 Acceso al sistema de archivos (6)

SKILL.md:78 SKILL.md:123 SKILL.md:113 SKILL.md:191 SKILL.md:113 SKILL.md:191

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/drix10-invoking-agents/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/drix10-invoking-agents/security.svg)](https://skillstore.io/skills/drix10-invoking-agents?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/drix10-invoking-agents?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/drix10-invoking-agents/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/drix10-invoking-agents.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

drix10. (2026). invoking-agents security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/drix10-invoking-agents/audits/1

Cita BibTeX

@techreport{drix10-drix10-invoking-agents-2026,
  author = {drix10},
  title = {invoking-agents security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/drix10-invoking-agents/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "invoking-agents security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "drix10"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/drix10-invoking-agents/audits/1"
identifiers:
  - type: other
    value: "skillstore:drix10-invoking-agents:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Deliver a GitHub Issue

Run one tracked issue through implementation, independent review, QA, and pull request creation.

Process a Local Work Item

Use acceptance criteria from local issue files when a GitHub issue is unavailable.

Enforce Review Separation

Keep implementation, review, and QA in separate processes with file-based evidence and bounded review rounds.

Prueba estos prompts

Run One Issue

Implement issue #{issue_number} through the full agent-flow pipeline and open a pull request.

Use Local Acceptance Criteria

Process the work item in {issue_file} as issue {issue_number}, then implement, review, test, and prepare a pull request.

Resume an Escalated Issue

Resume issue #{issue_number} after this decision: {decision}. Preserve existing artifacts and continue from the recorded state.

Coordinate Parallel Issues

Classify issues {issue_numbers}, identify overlapping files, run independent worktrees in parallel, and serialize any conflicting changes.

Mejores prácticas

Provide testable acceptance criteria before starting the pipeline.
Use enforced containers or sandboxes for every agent that can edit or execute commands.
Review escalation briefs and critical draft pull requests before continuing.

Evitar

Do not combine implementer, reviewer, and QA responsibilities in one agent context.
Do not bypass protected-path checks, review-round limits, or required human approval.
Do not interpolate issue text directly into shell commands.

Preguntas frecuentes

Which issue sources are supported?

The skill accepts inline criteria, GitHub issues through gh, and local ISSUES.md or .agent-issues.json files.

Does it implement changes itself?

No. It coordinates separate implementer, reviewer, and QA processes and exchanges artifacts between them.

When does it request human input?

It escalates missing specifications, architecture decisions, protected-path changes, critical changes, repeated failures, and unavailable GitHub operations.

Can it create pull requests?

Yes. It pushes the issue branch and uses gh after implementation, review, and QA complete.

Does it support parallel issues?

Yes. Independent issues can use separate worktrees, but issues touching the same files should run sequentially.

Is worktree confinement automatic?

Only some harnesses enforce it. Claude and Codex implementers require an external container or sandbox for a hard boundary.

Detalles del desarrollador

Autor

drix10

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/drix10/agent-flow/tree/aac4c5c023b25d073997626804c355ed11348feb/skills/invoking-agents

Ref.

8b5ad1599e7c55e9b6c627bca3f556f6e9061cb1

Actualidad del mantenimiento

30/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md