ship
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses shell commands (git, gh, cat) to dynamically populate context variables at load time. These commands are used to identify the current branch, repository root, and PR status, which is consistent with the skill's purpose as a development tool.
- [DATA_EXPOSURE]: The skill reads a project-specific configuration file (.shiprc.json). This is a standard practice for development utilities and does not involve accessing sensitive system files or credentials.
Audit Metadata