magpie-setup-override-upstream
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill utilizes shell commands including
git,gh(GitHub CLI), andprek(a pre-commit tool). These are employed to manage the development lifecycle, specifically for repository cloning, branch management, and submitting pull requests. All state-changing actions are designed to require explicit user confirmation before execution. - Indirect Data Ingestion: The skill processes information from
.apache-magpie-overrides/files to design framework abstractions. This represents a data ingestion surface where the agent reads content that could be influenced by external actors or users. \n - Ingestion points: SKILL.md (Step 2) reads files from the
.apache-magpie-overrides/directory. \n - Boundary markers: Explicit delimiters for the ingested content are not defined in the instructions. \n
- Capability inventory: The skill has access to file system operations,
git(commit/push), and the GitHub CLI (gh pr create). \n - Sanitization: The skill does not specify automated sanitization or escaping of the ingested markdown content before it is used to generate PR descriptions or code changes.
Audit Metadata