stacked-pr-decomposition
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill describes a standard software development workflow for managing complex pull requests through branch decomposition.
- [COMMAND_EXECUTION]: The instructions guide the agent to perform local git operations such as switching branches, pulling, and rebasing, as well as pull request management using the GitHub CLI. These actions are within the expected scope of a branch decomposition tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of Git branch content and commit history (SKILL.md). No explicit boundary markers or delimiters for this data are mentioned. Capabilities include file system access via git commands and network operations via the gh CLI (SKILL.md). No specific sanitization or validation of the branch content is defined.
Audit Metadata