skills/kevmoo/scripts.dart/pr-cleanup/Gen Agent Trust Hub

pr-cleanup

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads and installs the kscripts tool from the author's GitHub repository (https://github.com/kevmoo/scripts.dart) using the Dart package manager.
  • [COMMAND_EXECUTION]: Uses git, dart, and kscripts to manage repository state, including branch deletion and worktree removal.
  • [INDIRECT_PROMPT_INJECTION]: Ingests external data from GitHub and Gerrit that could contain malicious instructions.
  • Ingestion points: External pull request titles and Gerrit status data processed in SKILL.md.
  • Boundary markers: None; results are presented in a structured report for user approval.
  • Capability inventory: SKILL.md (includes git worktree remove --force, git branch -D, and agentapi send-message).
  • Sanitization: Not explicitly defined in the instruction set.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:28 AM