mergify-merge-protections

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and command examples for the mergify CLI tool, which is a legitimate vendor resource for 'mergifyio'. The instructions cover standard operational tasks such as managing PR headers (Depends-On, Merge-After) and repository freezes. All network interactions are directed to the official Mergify API (https://api.mergify.com). While the skill mentions the use of sensitive tokens (MERGIFY_TOKEN), it correctly advises using mergify auth login or environment variables, which is a standard and safe practice for CLI tools. No malicious patterns, obfuscation, or unauthorized access attempts were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 07:44 AM