he-bing
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Git and GitHub CLI commands to manage repository state, create worktrees, and perform PR operations. Includes potentially destructive cleanup via 'rm -rf' gated by path safety checks.
- [EXTERNAL_DOWNLOADS]: Fetches code from GitHub and installs dependencies via standard package managers (npm, bun, poetry).
- [PRIVILEGE_ESCALATION]: Utilizes administrative merge capabilities ('--admin' flag) within the GitHub environment to finalize PRs, consistent with the workflow requirements.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external repository data and user task descriptions which could contain untrusted instructions. Evidence chain:
- Ingestion points: Task descriptions in commands and PR metadata retrieved via 'gh pr'.
- Boundary markers: Absent in prompt interpolation.
- Capability inventory: Shell execution (git, gh, rm), file-write (feature implementation), and network access (push/pull).
- Sanitization: Branch names derived from user input are sanitized using 'tr' and truncated to 50 characters.
Audit Metadata