merge-pr
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses established GitHub CLI (
gh) and Git commands to manage PR merges. It requires the use of isolated git worktrees, which is a best practice for maintaining repository integrity during automated operations. - [SAFE]: Detailed safety guardrails are included to prevent the agent from performing unauthorized actions, such as stopping gateway processes or accessing specific network ports (e.g., port 18792).
- [SAFE]: Data ingestion is restricted to metadata from GitHub PRs and local audit files (
.local/review.md,.local/prep.md). These artifacts are generated by preceding PR review and preparation steps, and the skill does not access sensitive system paths or credentials. - [SAFE]: No obfuscation, remote code execution, or persistence mechanisms were detected. The skill's operations are transparent and aligned with its stated purpose.
Audit Metadata