📦

invoking-agents

Name: invoking-agents
Author: drix10

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе

Orchestrate Issues Through Review and QA

Multi-agent issue delivery can lose state, mix roles, and skip safeguards. This skill coordinates implementation, review, QA, escalation, and pull request creation through agent-flow.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "invoking-agents" from https://skillstore.io/skills/drix10-invoking-agents.md and its manifest at https://skillstore.io/api/skills/drix10-invoking-agents/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/drix10-invoking-agents.md Подписанный manifest GET /api/skills/drix10-invoking-agents/manifest Подписанный lockfile GET /api/skills/drix10-invoking-agents/lockfile

Протестировать

Использование «invoking-agents». Implement issue #42 and open a pull request.

Ожидаемый результат:

Issue #42 completed. Implementation, review, and QA passed. Pull request #108 was opened from the issue branch.

Использование «invoking-agents». Run issue #57 through the pipeline.

Ожидаемый результат:

Issue #57 needs a human decision because the acceptance criteria conflict. The decision brief includes the exact ambiguity and attempted resolution.

Использование «invoking-agents». Process issues #60 and #61 in parallel.

Ожидаемый результат:

Issue #60 started in its own worktree.
Issue #61 was serialized because both classifications include the same file.

Аудит безопасности

Высокий риск

v1 • 27.09.2026 Открыть версионный отчет

The 81 static alerts are false positives caused by Markdown formatting, safe documentation references, or fixed workflow checks. Two semantic risks remain: unconfined implementer processes and unsafe shell interpolation of an untrusted issue title.

Просканировано файлов

200

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий

SKILL.md:49-78

Unconfined Implementer Processes

Claude and Codex implementers run without enforced worktree confinement while processing untrusted issue content. Environment variables and prompts are advisory, so a compromised agent could modify files outside the worktree.

The skill explicitly states that Claude and Codex lack worktree confinement and recommends an external container or sandbox. Their launch commands do not enforce that boundary.

Высокий

SKILL.md:159-160

Untrusted Issue Title Interpolated Into Shell Command

The pull request command places the untrusted issue title inside a double-quoted shell argument. Shell substitutions within a title could execute unless the value is escaped or passed without shell parsing.

The skill declares issue text untrusted, then shows the issue title substituted into a shell command. Double quotes do not suppress shell command substitution.

Факторы риска

⚙️ Внешние команды (50)

🌐 Доступ к сети (1)

SKILL.md:113

📁 Доступ к файловой системе (6)

SKILL.md:78 SKILL.md:123 SKILL.md:113 SKILL.md:191 SKILL.md:113 SKILL.md:191

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/drix10-invoking-agents/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/drix10-invoking-agents/security.svg)](https://skillstore.io/skills/drix10-invoking-agents?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/drix10-invoking-agents?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/drix10-invoking-agents/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/drix10-invoking-agents.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

drix10. (2026). invoking-agents security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/drix10-invoking-agents/audits/1

Цитата BibTeX

@techreport{drix10-drix10-invoking-agents-2026,
  author = {drix10},
  title = {invoking-agents security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/drix10-invoking-agents/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "invoking-agents security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "drix10"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/drix10-invoking-agents/audits/1"
identifiers:
  - type: other
    value: "skillstore:drix10-invoking-agents:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Deliver a GitHub Issue

Run one tracked issue through implementation, independent review, QA, and pull request creation.

Process a Local Work Item

Use acceptance criteria from local issue files when a GitHub issue is unavailable.

Enforce Review Separation

Keep implementation, review, and QA in separate processes with file-based evidence and bounded review rounds.

Попробуйте эти промпты

Run One Issue

Implement issue #{issue_number} through the full agent-flow pipeline and open a pull request.

Use Local Acceptance Criteria

Process the work item in {issue_file} as issue {issue_number}, then implement, review, test, and prepare a pull request.

Resume an Escalated Issue

Resume issue #{issue_number} after this decision: {decision}. Preserve existing artifacts and continue from the recorded state.

Coordinate Parallel Issues

Classify issues {issue_numbers}, identify overlapping files, run independent worktrees in parallel, and serialize any conflicting changes.

Лучшие практики

Provide testable acceptance criteria before starting the pipeline.
Use enforced containers or sandboxes for every agent that can edit or execute commands.
Review escalation briefs and critical draft pull requests before continuing.

Избегать

Do not combine implementer, reviewer, and QA responsibilities in one agent context.
Do not bypass protected-path checks, review-round limits, or required human approval.
Do not interpolate issue text directly into shell commands.

Часто задаваемые вопросы

Which issue sources are supported?

The skill accepts inline criteria, GitHub issues through gh, and local ISSUES.md or .agent-issues.json files.

Does it implement changes itself?

No. It coordinates separate implementer, reviewer, and QA processes and exchanges artifacts between them.

When does it request human input?

It escalates missing specifications, architecture decisions, protected-path changes, critical changes, repeated failures, and unavailable GitHub operations.

Can it create pull requests?

Yes. It pushes the issue branch and uses gh after implementation, review, and QA complete.

Does it support parallel issues?

Yes. Independent issues can use separate worktrees, but issues touching the same files should run sequentially.

Is worktree confinement automatic?

Only some harnesses enforce it. Claude and Codex implementers require an external container or sandbox for a hard boundary.

Сведения для разработчиков

Автор

drix10

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/drix10/agent-flow/tree/aac4c5c023b25d073997626804c355ed11348feb/skills/invoking-agents

Ссылка

8b5ad1599e7c55e9b6c627bca3f556f6e9061cb1

Актуальность поддержки

30.09.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md