auto-merge
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes GitHub CLI (gh) commands to interact with repository pull requests and jq for state management.
- [INDIRECT_PROMPT_INJECTION]: Processes pull request metadata from external repositories.
- Ingestion points: Pull request titles, authors, and status check results fetched via the GitHub API in SKILL.md.
- Boundary markers: Extensive safety policy gates including author allowlists, size limits, and branch restrictions validate data before merge actions.
- Capability inventory: Pull request merging via gh pr merge and file writes to the local memory directory.
- Sanitization: PR metadata is parsed as structured JSON through the GitHub CLI and jq.
Audit Metadata