mergify-merge-protections
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and command examples for the
mergifyCLI tool, which is a legitimate vendor resource for 'mergifyio'. The instructions cover standard operational tasks such as managing PR headers (Depends-On,Merge-After) and repository freezes. All network interactions are directed to the official Mergify API (https://api.mergify.com). While the skill mentions the use of sensitive tokens (MERGIFY_TOKEN), it correctly advises usingmergify auth loginor environment variables, which is a standard and safe practice for CLI tools. No malicious patterns, obfuscation, or unauthorized access attempts were found.
Audit Metadata