mergify-config

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches official Mergify configuration schemas and documentation from the vendor's website (docs.mergify.com).
  • [COMMAND_EXECUTION]: Executes the mergify-cli to perform configuration validation and PR action simulations.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files and remote documentation, which represents a potential attack surface.
  • Ingestion points: Processes local files (e.g., .mergify.yml) and retrieves remote documentation from docs.mergify.com at runtime.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the ingested content.
  • Capability inventory: Can execute mergify commands and read local files to process the configuration.
  • Sanitization: No explicit sanitization of the documentation content is performed before it is used to inform agent actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 07:44 AM