gh-dep-pr-triage

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses gh (GitHub CLI) and git commands to automate PR management. These are standard tools for the stated purpose of triaging dependency updates.
  • [COMMAND_EXECUTION]: The skill utilizes git worktree to isolate changes for multiple PRs, which is a safe and effective way to handle parallel fixes without polluting the main working directory.
  • [COMMAND_EXECUTION]: All merging operations (gh pr merge) are gated behind explicit user confirmation and include error handling (|| true) to manage potential failures gracefully.
  • [SAFE]: The skill is authored by 'jackchuka' and all operations are performed on the user's local repositories and the official GitHub API via gh CLI. No external or untrusted resources are involved.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:35 AM