mergify-events
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as documentation and a set of instructions for using the
mergifycommand-line tool. All described behaviors and referenced API endpoints (/v1/repos/{owner}/{repo}/logs) are consistent with the official functionality of the Mergify platform. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes activity log data which may contain user-controllable strings (such as pull request titles or command metadata).
- Ingestion points: Data enters the agent's context through the output of the
mergify eventscommand (text or JSON). - Boundary markers: Absent in the provided instructions.
- Capability inventory: The skill utilizes the
mergifyCLI to perform read-only operations on repository logs. - Sanitization: No specific sanitization or filtering of the ingested log content is described.
Audit Metadata