invoking-agents
Orchestrate Issues Through Review and QA
Multi-agent issue delivery can lose state, mix roles, and skip safeguards. This skill coordinates implementation, review, QA, escalation, and pull request creation through agent-flow.
ArrĂȘtez-vous et demandez confirmation avant lâinstallation.
Examinez le plan et obtenez le consentement explicite de lâutilisateur avant de modifier des fichiers.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Review the Skillstore skill "invoking-agents" from https://skillstore.io/skills/drix10-invoking-agents.md and its manifest at https://skillstore.io/api/skills/drix10-invoking-agents/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsquâun Agent IA, un crawler ou un script a besoin dâun contexte propre au lieu de lire toute la page.
Tester
Utilisation de « invoking-agents ». Implement issue #42 and open a pull request.
RĂ©sultat attendu:
Issue #42 completed. Implementation, review, and QA passed. Pull request #108 was opened from the issue branch.
Utilisation de « invoking-agents ». Run issue #57 through the pipeline.
RĂ©sultat attendu:
Issue #57 needs a human decision because the acceptance criteria conflict. The decision brief includes the exact ambiguity and attempted resolution.
Utilisation de « invoking-agents ». Process issues #60 and #61 in parallel.
RĂ©sultat attendu:
- Issue #60 started in its own worktree.
- Issue #61 was serialized because both classifications include the same file.
Audit de sécurité
Risque élevéThe 81 static alerts are false positives caused by Markdown formatting, safe documentation references, or fixed workflow checks. Two semantic risks remain: unconfined implementer processes and unsafe shell interpolation of an untrusted issue title.
Préoccupations de sécurité confirmées (2)
Facteurs de risque
âïž Commandes externes (50)
đ AccĂšs rĂ©seau (1)
đ AccĂšs au systĂšme de fichiers (6)
Partager et citer ce rapport
Partagez le rapport dâĂ©valuation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.
Copier le lien du rapport
https://skillstore.io/skills/drix10-invoking-agents/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/drix10-invoking-agents?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/drix10-invoking-agents?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/drix10-invoking-agents/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/drix10-invoking-agents.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
drix10. (2026). invoking-agents security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/drix10-invoking-agents/audits/1Citation BibTeX
@techreport{drix10-drix10-invoking-agents-2026,
author = {drix10},
title = {invoking-agents security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/drix10-invoking-agents/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "invoking-agents security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "drix10"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/drix10-invoking-agents/audits/1"
identifiers:
- type: other
value: "skillstore:drix10-invoking-agents:audit:1"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: MoyenCe que vous pouvez créer
Deliver a GitHub Issue
Run one tracked issue through implementation, independent review, QA, and pull request creation.
Process a Local Work Item
Use acceptance criteria from local issue files when a GitHub issue is unavailable.
Enforce Review Separation
Keep implementation, review, and QA in separate processes with file-based evidence and bounded review rounds.
Essayez ces prompts
Implement issue #{issue_number} through the full agent-flow pipeline and open a pull request.Process the work item in {issue_file} as issue {issue_number}, then implement, review, test, and prepare a pull request.Resume issue #{issue_number} after this decision: {decision}. Preserve existing artifacts and continue from the recorded state.Classify issues {issue_numbers}, identify overlapping files, run independent worktrees in parallel, and serialize any conflicting changes.Bonnes pratiques
- Provide testable acceptance criteria before starting the pipeline.
- Use enforced containers or sandboxes for every agent that can edit or execute commands.
- Review escalation briefs and critical draft pull requests before continuing.
Ăviter
- Do not combine implementer, reviewer, and QA responsibilities in one agent context.
- Do not bypass protected-path checks, review-round limits, or required human approval.
- Do not interpolate issue text directly into shell commands.