unite-group-ci-recovery
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
gh pr merge --adminto bypass standard branch protection rules and merge pull requests that have failing status checks. - [COMMAND_EXECUTION]: Instructions are provided to execute database queries directly against production environments using the Supabase CLI (
supabase db query --linked). - [PRIVILEGE_ESCALATION]: The skill contains logic to programmatically check branch protection settings and rulesets via the GitHub API to determine if administrative overrides are necessary to proceed with merges.
- [REMOTE_CODE_EXECUTION]: The playbook references and provides templates for calling a specific MCP tool (
mcp__21d7de5d-7115-4af8-a6c3-2b86769b05fb__apply_migration) to execute multi-statement SQL migrations on remote Supabase projects. - [DATA_EXFILTRATION]: The skill includes instructions to query database schema metadata (e.g.,
to_regclass,information_schema.tables) and verify environment variable presence (JWT_SECRET) which involves accessing sensitive system state. - [PROMPT_INJECTION]: Section 4 contains a prompt template designed to be passed to a sub-agent. This template instructs the sub-agent to follow the rules of the recovery skill, which could be used to influence the autonomous decision-making process of other agents in the pipeline.
Audit Metadata