gh-stack
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
gh-stackextension viagh extension install github/gh-stack. This fetches code from the official GitHub organization, which is a well-known and trusted source for development tools. - [COMMAND_EXECUTION]: The skill utilizes standard
gitandgh(GitHub CLI) commands to manage local and remote code state. These actions are consistent with the skill's stated purpose of managing branch stacks and pull requests. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading pull request metadata and branch names from GitHub (e.g., via
gh stack view --json). While this creates a surface for indirect instructions, the data originates from the user's own repositories or trusted project environments, and the usage is integral to the skill's primary function.
Audit Metadata