stacked-prs

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the gh-stack extension from the official GitHub organization repository. This involves downloading and installing an extension using the gh extension install github/gh-stack command.
  • [COMMAND_EXECUTION]: The skill utilizes standard developer tools, specifically the GitHub CLI (gh) and Git, to perform branch navigation, rebasing, and pull request submission. Commands like gh stack push and gh stack submit are used as intended for repository management.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles external data by reading commit messages and repository-level pull request templates to generate PR descriptions. This provides a surface for indirect prompt injection, which is a standard risk factor for agents performing version control tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 02:35 PM