stacked-prs
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official
gh-stackextension from GitHub's own repository (github/gh-stack) via the GitHub CLI. This is a standard and expected operation for the skill's stated purpose. - [COMMAND_EXECUTION]: The skill utilizes a series of
gitandgh(GitHub CLI) commands to perform branch management, repository synchronization, and conflict resolution. These includegit worktreefor temporary workspace management andgh stackcommands for PR chain orchestration. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from GitHub's API, such as PR status and stack metadata (via
gh stack view --jsonandgh pr view --json). While this involves ingesting external data, the impact is limited to diagnostic information about mergeability and stack structure, with no direct execution path for unverified content.
Audit Metadata