mergify-ci
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data which could theoretically be manipulated to influence the agent's behavior if it contains embedded instructions.
- Ingestion points: The skill is designed to parse external JUnit XML test reports and read repository configuration files such as
.mergify.yml. - Boundary markers: The instructions lack explicit delimiters or guidance for the agent to disregard natural language instructions that might be found within the data files it processes.
- Capability inventory: The skill enables network communication with the vendor's API (api.mergify.com) and the execution of various Mergify CLI commands on the host environment.
- Sanitization: There are no specific instructions for the agent to sanitize or validate the content of the XML reports before they are processed.
Audit Metadata