warp-deploy-nexus
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Performs repository operations using
gitandghCLI tools, including branch creation, code commits, and PR generation targeting thenexusbranch. - [EXTERNAL_DOWNLOADS]: Retrieves information from external Linear URLs to identify warp route IDs for processing.
- [PROMPT_INJECTION]: The skill processes untrusted data from external Linear tickets which is then interpolated into a TypeScript configuration file. While this represents an indirect prompt injection surface, it is consistent with the skill's primary purpose of automating developer workflows.
- Ingestion points: Content retrieved from user-provided Linear ticket URLs specified in SKILL.md.
- Boundary markers: None identified for the external ticket content.
- Capability inventory: Branching, committing, and pushing code via
git, and creating pull requests viagh(SKILL.md). - Sanitization: Instructions specify extracting the warp route ID, but do not define explicit validation or sanitization rules.
Audit Metadata