
Pre-action security audit for AI agents before running shell, scripts, or tools: prompt-injection refusal, sensitive-path denylist, destructive-command gates, high-risk human-in-the-loop (CONFIRM), supply-chain preview for external code, post-action cleanup and change summary. Use when the user wants safe execution discipline, or when running commands that could affect assets, network, or system.
Calls the local agent-im Kanban HTTP API (projects, sprints, tasks create/assign, kanban-roles, bridge, local-config). Use when the user wants to create or assign Kanban tasks via API, automate the board, or curl workflows against agent-im (default port 3300). Primary focus: POST /api/workflows/tasks/create and assign.
Use when running end-to-end Kanban workflow tests against a live agent-im server, verifying state transitions, API behavior, coverage gates, private repo CI lane, UAT, blocking, hotfix, and async close flows from docs/KANBAN-TESTCASES.md