mergify-config
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official Mergify configuration schemas and documentation from the vendor's website (docs.mergify.com).
- [COMMAND_EXECUTION]: Executes the
mergify-clito perform configuration validation and PR action simulations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files and remote documentation, which represents a potential attack surface.
- Ingestion points: Processes local files (e.g.,
.mergify.yml) and retrieves remote documentation fromdocs.mergify.comat runtime. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the ingested content.
- Capability inventory: Can execute
mergifycommands and read local files to process the configuration. - Sanitization: No explicit sanitization of the documentation content is performed before it is used to inform agent actions.
Audit Metadata