stack-push

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates git workflows using shell commands (git, gh, sed, sort) to list branches, push them to origin, and manage GitHub Pull Requests. These operations are performed locally within the user's repository context.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of git branch names and GitHub PR metadata.\n
  • Ingestion points: Branch names are retrieved via git branch --list and PR numbers via gh pr list in SKILL.md.\n
  • Boundary markers: No specific delimiters are used when interpolating branch names into shell commands or PR bodies.\n
  • Capability inventory: The skill performs git push and utilizes the GitHub CLI for PR creation and commenting in SKILL.md.\n
  • Sanitization: Absent. Branch names are not explicitly sanitized before being used in shell commands like echo, printf, or as arguments to the gh command, which represents a theoretical surface for injection if branch names are attacker-controlled.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:49 PM