Multi-agent AI skill orchestration — 13 skills, 7 lifecycle phases, from idea to post-release. Works with Claude Code, Codex, Gemini CLI, Cursor, Windsurf, OpenCode, and any agent that reads Markdown or speaks MCP.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution in LangeVC/skillweave
- HIGH code analysis flagged dynamic code execution ×2 in LangeVC/skillweave
transport stdio counts 6 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
cancel_run
-
create_run
-
get_evidence
-
resume_run
-
review_run
-
status_run
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 4b69310 · analyzer v33 · 1d ago
skills & prompt files 15
- agent-rules LangeVC-skillweave-4b69310/AGENTS.md
- agent-rules LangeVC-skillweave-4b69310/CLAUDE.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-blueprint/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-council/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-design/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-discovery/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-launch/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-lifecycle/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-observe/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-post-release/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-promptchain-execute/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-promptchain-generate/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-promptchain-validate/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-releasechain/SKILL.md
- skill LangeVC-skillweave-4b69310/skills/skillweave-repo-health/SKILL.md
danger signals6
- dynamic code execution __import__ sink LangeVC-skillweave-4b69310/src/skillweave/studio/hooks/engine/chain.py :295
env={**dict(__import__("os").environ), **env}, - dynamic code execution eval()/exec() LangeVC-skillweave-4b69310/src/skillweave/studio/hooks/engine/condition.py :111
result = eval(compile(tree, "<condition>", "eval"), safe_ns) # noqa: S307 - dynamic code execution __import__() LangeVC-skillweave-4b69310/tests/gate_b06/dod_proof.py :141
__import__(mod) - dynamic code execution __import__() LangeVC-skillweave-4b69310/tests/gate_b06/whitelabel_proof.py :37
__import__(mod_name) - dynamic code execution __import__() LangeVC-skillweave-4b69310/tests/test_gnf_remaining.py :27
__import__(module_name, fromlist=["_"]) - dynamic code execution __import__ sink LangeVC-skillweave-4b69310/tests/unit/test_runner_adapter.py :75
assert result.pid != __import__("os").getpid()
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 447
filesystem 219
- fs (weak) LangeVC-skillweave-4b69310/examples/cli_demo.py :13
from pathlib import Path - fs (weak) LangeVC-skillweave-4b69310/examples/create_example_templates.py :8
from pathlib import Path - fs (weak) LangeVC-skillweave-4b69310/examples/next_level_demo.py :22
import shutil - fs (weak) LangeVC-skillweave-4b69310/examples/next_level_skill_example.py :13
from pathlib import Path - fs LangeVC-skillweave-4b69310/fix_dispatch.py :3
with open("src/skillweave/routing/dispatch.py", "r") as f: - fs LangeVC-skillweave-4b69310/patch_avail.py :2
with open("src/skillweave/routing/faigate_adapter.py", "r") as f: - fs LangeVC-skillweave-4b69310/patch_openrouter.py :2
with open("src/skillweave/routing/faigate_adapter.py", "r") as f: - fs (weak) LangeVC-skillweave-4b69310/rm_test.py :2
with open("tests/integration/test_gle020_import_cycle.py", "r") as f: - fs (weak) LangeVC-skillweave-4b69310/scripts/check-manifest.py :30
from pathlib import Path - fs (weak) LangeVC-skillweave-4b69310/scripts/regen-sequence.py :31
import shutil - fs (weak) LangeVC-skillweave-4b69310/scripts/sync-capacium-manifests.py :4
from pathlib import Path - fs (weak) LangeVC-skillweave-4b69310/skip_test.py :1
with open("tests/integration/test_gle020_import_cycle.py", "r") as f:
show 28 more
- fs LangeVC-skillweave-4b69310/src/skillweave/backlog_sync.py :11
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/capability.py :8
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/checklist.py :14
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/cli/observe.py :41
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/cli/planning_sync.py :23
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/cli/rework.py :15
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/community_knowhow.py :10
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/core/catalogue/__init__.py :29
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/core/context/checkpoint.py :18
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/core/context/config.py :12
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/core/observer/observer.py :34
with open(self._storage_path, 'r') as f: - fs LangeVC-skillweave-4b69310/src/skillweave/council/profile_parser.py :18
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/design_thinking.py :11
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/dispatch/application.py :33
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/execution/batch_planner.py :4
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/execution_checklist.py :4
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/execution_integration.py :1
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/execution_memory.py :3
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/gates/attestation.py :38
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/autotag.py :9
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/capability_sync.py :13
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/changelog.py :9
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/docs_sync.py :9
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/inventory.py :9
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/issue_manager.py :9
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/pr_description.py :9
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/release_gate.py :11
from pathlib import Path - fs LangeVC-skillweave-4b69310/src/skillweave/github_integration/release_notes.py :9
from pathlib import Path
179 more not shown — this panel samples each group; the count above is the real total.
shell / exec 35
- shell LangeVC-skillweave-4b69310/src/skillweave/backlog_sync.py :8
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/cli/observe.py :38
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/core/proc/runner.py :2
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/council/search.py :372
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/github_integration/release_notes.py :48
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/installer.py :16
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/launch/deployment.py :3
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/onboarding_cli.py :2
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/release/readiness.py :9
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/release/workflow.py :11
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/runtime/runner_adapter.py :68
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/studio/hooks/discovery/scanner.py :21
import subprocess
show 23 more
- shell LangeVC-skillweave-4b69310/src/skillweave/studio/hooks/engine/chain.py :21
import subprocess - shell LangeVC-skillweave-4b69310/src/skillweave/workspace/provider.py :13
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_1311/test_coverage.py :17
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_1312/test_manifest.py :126
if ("subprocess.run(" in line or "subprocess.check" in line - shell (weak) LangeVC-skillweave-4b69310/tests/gate_1312/test_release_provenance.py :12
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_1312/test_topology_regressions.py :25
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_b06/degraded_proof.py :25
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_b06/dod_proof.py :98
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_b06/gle020_import_decoupling_proof.py :40
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/gate_b06/test_self_hosting_multilane_gate.py :29
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/integration/test_gle020_import_cycle.py :23
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/integration/test_operator_dispatch.py :196
"import subprocess", - shell (weak) LangeVC-skillweave-4b69310/tests/packaging/test_catalogue_installed.py :15
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/packaging/test_discovery_installed.py :21
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/release/test_forgejo_first_release_contract.py :27
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/release/test_version_topology.py :23
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/test_lifecycle_system.py :2
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/test_session_boundary.py :18
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/unit/test_dagscheduler.py :379
"import subprocess", - shell (weak) LangeVC-skillweave-4b69310/tests/unit/test_doc_arch.py :19
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/unit/test_fanout.py :17
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/unit/test_host_claim.py :15
import subprocess - shell (weak) LangeVC-skillweave-4b69310/tests/unit/test_workspace.py :16
import subprocess
network 9
- net LangeVC-skillweave-4b69310/src/skillweave/core/workspace/remote/provider.py :13
import urllib.request - net LangeVC-skillweave-4b69310/src/skillweave/council/search.py :20
import urllib.request - net LangeVC-skillweave-4b69310/src/skillweave/launch/deployment.py :5
import urllib.error - net LangeVC-skillweave-4b69310/src/skillweave/launch/metrics.py :3
import urllib.error - net LangeVC-skillweave-4b69310/src/skillweave/routing/faigate_adapter.py :23
import urllib.request - net (weak) LangeVC-skillweave-4b69310/tests/soak/guard.py :14
import socket - net (weak) LangeVC-skillweave-4b69310/tests/unit/conftest.py :8
``socket.socket.connect``) is intercepted and refused. Any test that tries - net (weak) LangeVC-skillweave-4b69310/tests/unit/test_provider_transport.py :21
import socket - net (weak) LangeVC-skillweave-4b69310/tests/unit/test_unit_suite_is_hermetic.py :21
import socket
secrets 4
- secrets LangeVC-skillweave-4b69310/src/skillweave/core/workspace/remote/provider.py :38
self.api_token = api_token or os.environ.get("SKILLWEAVE_REMOTE_TOKEN", "") - secrets LangeVC-skillweave-4b69310/src/skillweave/launch/deployment.py :26
gh_token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN") - secrets LangeVC-skillweave-4b69310/src/skillweave/routing/faigate_adapter.py :701
os.environ.get("FAIGATE_API_KEY") or - secrets (weak) LangeVC-skillweave-4b69310/tests/test_council.py :433
if not os.environ.get("OPENAI_API_KEY"):
database 4
- db LangeVC-skillweave-4b69310/src/skillweave/runtime/journal.py :7
import sqlite3 - db LangeVC-skillweave-4b69310/src/skillweave/runtime/store.py :12
import sqlite3 - db (weak) LangeVC-skillweave-4b69310/tests/integration/test_operator_dispatch.py :198
"import sqlite3", - db (weak) LangeVC-skillweave-4b69310/tests/test_rtf_foundation.py :493
import sqlite3
tool registrations 6
- create_run LangeVC-skillweave-4b69310/src/skillweave/mcp/server.py :35
- status_run LangeVC-skillweave-4b69310/src/skillweave/mcp/server.py :58
- cancel_run LangeVC-skillweave-4b69310/src/skillweave/mcp/server.py :71
- resume_run LangeVC-skillweave-4b69310/src/skillweave/mcp/server.py :90
- get_evidence LangeVC-skillweave-4b69310/src/skillweave/mcp/server.py :108
- review_run LangeVC-skillweave-4b69310/src/skillweave/mcp/server.py :121
declared dependencies 8
- PyYAML@>=6.0
- Repository@# boundary
- skillweave-sdk@==0.1.0
- pytest@>=7.0
- pytest-asyncio@>=0.23
- black@>=23.0
- flake8@>=6.0
- jsonschema@>=4.0