gh-stack
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the github/gh-stack extension using the GitHub CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, such as Git branch names, commit messages, and pull request metadata via gh stack view --json. * Ingestion points: Branch names, commit messages, and PR metadata read in SKILL.md and references/commands.md. * Boundary markers: Not explicitly defined for CLI data ingestion. * Capability inventory: Bash for command execution and Read for file access. * Sanitization: The skill relies on the structured output of the gh CLI tools rather than manual parsing.
Audit Metadata