stacked-prs
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
gh-stackextension from the official GitHub organization repository. This involves downloading and installing an extension using thegh extension install github/gh-stackcommand. - [COMMAND_EXECUTION]: The skill utilizes standard developer tools, specifically the GitHub CLI (
gh) and Git, to perform branch navigation, rebasing, and pull request submission. Commands likegh stack pushandgh stack submitare used as intended for repository management. - [INDIRECT_PROMPT_INJECTION]: The skill handles external data by reading commit messages and repository-level pull request templates to generate PR descriptions. This provides a surface for indirect prompt injection, which is a standard risk factor for agents performing version control tasks.
Audit Metadata