merge-open-prs
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various
gh(GitHub CLI) commands to interact with pull requests. These are standard operations for repository management, includinggh api,gh pr view,gh pr diff, andgh pr merge. All commands are used for their intended purpose within the git workflow. - [SAFE]: The instructions emphasize repository safety by requiring the agent to respect branch protection rules, verify CI status using the
babysitskill before merging, and handling conflicts through a dedicated resolution process. It explicitly forbids pushing directly to the default branch, ensuring all changes pass through the repository's 'forge' (pull request process). - [SAFE]: The skill includes logic to prevent accidental merges of PRs opened after the initial snapshot ('the work set does not grow'), which protects against certain types of race conditions or indirect injections where a malicious actor might open a new PR while the agent is processing.
Audit Metadata