skills/ilamanov/skills/ship/Gen Agent Trust Hub

ship

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to install the gh stack extension if it is missing, which is a standard procedure for enabling stacked PR functionality in the GitHub CLI.
  • [EXTERNAL_DOWNLOADS]: The instruction to install the gh stack extension involves a download from a well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests review findings from external agents (Codex and Devin) as described in SKILL.md. While no explicit sanitization or boundary markers are defined for this tool output, the ingestion is central to the skill's core purpose and is governed by explicit triage rules to fix legitimate security and logic issues.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:01 PM