skills/anis-dr/skills/stacked-prs/Gen Agent Trust Hub

stacked-prs

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official gh-stack extension from GitHub's own repository (github/gh-stack) via the GitHub CLI. This is a standard and expected operation for the skill's stated purpose.
  • [COMMAND_EXECUTION]: The skill utilizes a series of git and gh (GitHub CLI) commands to perform branch management, repository synchronization, and conflict resolution. These include git worktree for temporary workspace management and gh stack commands for PR chain orchestration.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from GitHub's API, such as PR status and stack metadata (via gh stack view --json and gh pr view --json). While this involves ingesting external data, the impact is limited to diagnostic information about mergeability and stack structure, with no direct execution path for unverified content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 05:47 AM