pre-merge
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple
gitandghcommands, as well as a bundled shell script (sidecar.sh), to manage branch state, PR metadata, and GitHub issues. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from PR diffs and GitHub issue bodies (PRDs, slice issues) during the architectural review process.
- Ingestion points: GitHub PR diffs (
gh pr diff) and Issue bodies (gh issue view). - Boundary markers: Boundary maps (Produces/Consumes sections) and Must/Want/~Tilde story classification headers.
- Capability inventory: Git operations (read/write/diff), GitHub PR and Issue management (creation/edit/commenting), and local file system writes to the sidecar repository.
- Sanitization: Relies on structural parsing of requirements and implementation contracts; utilizes independent sub-agent contexts to isolate the review process from the authoring session's context.
Audit Metadata