dsh-merging-stacked-prs
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) and thegh stackextension to automate the merging of dependent pull requests. The commands are scoped to standard repository management tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes external metadata from GitHub, representing a potential injection surface.
- Ingestion points: PR metadata such as author names, branch names, and stack positions are fetched via
gh pr viewand the GitHub GraphQL API as described in SKILL.md. - Boundary markers: The instructions mandate strict verification of
author.loginacross the stack and require the agent to use the official GitHub stack object as the authority for ordering. - Capability inventory: The skill utilizes
gh stack link,gh stack sync, andgh stack mergefor repository mutations. - Sanitization: It requires manual user confirmation if authors differ or stack metadata is inconsistent, and it enforces a hard-stop on cross-repository chains.
- [SAFE]: The skill follows security best practices by avoiding force-pushes, requiring local validation after stack synchronization, and ensuring PRs are fully merged before deleting branches.
Audit Metadata