pr-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and installs the
kscriptstool from the author's GitHub repository (https://github.com/kevmoo/scripts.dart) using the Dart package manager. - [COMMAND_EXECUTION]: Uses
git,dart, andkscriptsto manage repository state, including branch deletion and worktree removal. - [INDIRECT_PROMPT_INJECTION]: Ingests external data from GitHub and Gerrit that could contain malicious instructions.
- Ingestion points: External pull request titles and Gerrit status data processed in
SKILL.md. - Boundary markers: None; results are presented in a structured report for user approval.
- Capability inventory:
SKILL.md(includesgit worktree remove --force,git branch -D, andagentapi send-message). - Sanitization: Not explicitly defined in the instruction set.
Audit Metadata