override-upstream

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Data Ingestion Surface]: The skill processes user-generated markdown files located in the .apache-magpie-overrides/ directory. While these files are local to the user's environment, they represent an ingestion point for instructions that could influence agent behavior during the PR design phase. The skill mitigates this by enforcing 'Golden Rules' that require the user to review all proposed changes and confirm every state-changing action.
  • [Development Tool Automation]: The skill executes several command-line tools, including git, the GitHub CLI (gh), and the framework's pre-commit utility (prek). These tools are used for standard development tasks such as cloning repositories, creating branches, and committing code. This automation is intended to streamline the contribution process and relies on tools already present in the developer's environment.
  • [External Resource Retrieval]: To perform its tasks, the skill may clone the official framework source code from GitHub. This operation targets a well-known repository within the same organization as the skill author, which is consistent with its primary purpose of framework contribution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 06:05 PM