stale-patch-reconciliation

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Utilizes extensive Git functionality including git apply, git log, git worktree, and git merge-base to analyze repository history and modify state.- [COMMAND_EXECUTION]: Employs shell utilities such as grep, awk, and cut within loops to parse patch files and validate hunk application status.- [COMMAND_EXECUTION]: Invokes Python testing frameworks (pytest) and generic subprocess execution to verify changes within the project environment, including documented workarounds for environment-specific execution guards.- [INDIRECT_PROMPT_INJECTION]: Ingests and processes external patch/diff files as primary data. The skill mitigates risks by instructing the agent to perform initial read-only analysis, use git apply --check for validation, and conduct repairs in isolated detached worktrees.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 07:55 AM
Security Audit — agent-trust-hub — stale-patch-reconciliation