stack-push
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates git workflows using shell commands (
git,gh,sed,sort) to list branches, push them to origin, and manage GitHub Pull Requests. These operations are performed locally within the user's repository context.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of git branch names and GitHub PR metadata.\n - Ingestion points: Branch names are retrieved via
git branch --listand PR numbers viagh pr listinSKILL.md.\n - Boundary markers: No specific delimiters are used when interpolating branch names into shell commands or PR bodies.\n
- Capability inventory: The skill performs
git pushand utilizes the GitHub CLI for PR creation and commenting inSKILL.md.\n - Sanitization: Absent. Branch names are not explicitly sanitized before being used in shell commands like
echo,printf, or as arguments to theghcommand, which represents a theoretical surface for injection if branch names are attacker-controlled.
Audit Metadata