warp-deploy-nexus

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Performs repository operations using git and gh CLI tools, including branch creation, code commits, and PR generation targeting the nexus branch.
  • [EXTERNAL_DOWNLOADS]: Retrieves information from external Linear URLs to identify warp route IDs for processing.
  • [PROMPT_INJECTION]: The skill processes untrusted data from external Linear tickets which is then interpolated into a TypeScript configuration file. While this represents an indirect prompt injection surface, it is consistent with the skill's primary purpose of automating developer workflows.
  • Ingestion points: Content retrieved from user-provided Linear ticket URLs specified in SKILL.md.
  • Boundary markers: None identified for the external ticket content.
  • Capability inventory: Branching, committing, and pushing code via git, and creating pull requests via gh (SKILL.md).
  • Sanitization: Instructions specify extracting the warp route ID, but do not define explicit validation or sanitization rules.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 12:52 AM
Security Audit — agent-trust-hub — warp-deploy-nexus