magpie-setup-override-upstream

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution: The skill utilizes shell commands including git, gh (GitHub CLI), and prek (a pre-commit tool). These are employed to manage the development lifecycle, specifically for repository cloning, branch management, and submitting pull requests. All state-changing actions are designed to require explicit user confirmation before execution.
  • Indirect Data Ingestion: The skill processes information from .apache-magpie-overrides/ files to design framework abstractions. This represents a data ingestion surface where the agent reads content that could be influenced by external actors or users. \n
  • Ingestion points: SKILL.md (Step 2) reads files from the .apache-magpie-overrides/ directory. \n
  • Boundary markers: Explicit delimiters for the ingested content are not defined in the instructions. \n
  • Capability inventory: The skill has access to file system operations, git (commit/push), and the GitHub CLI (gh pr create). \n
  • Sanitization: The skill does not specify automated sanitization or escaping of the ingested markdown content before it is used to generate PR descriptions or code changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 09:09 PM
Security Audit — agent-trust-hub — magpie-setup-override-upstream