mergify-stack

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate operational instructions for the mergify CLI tool, which is used for managing stacked pull requests on GitHub.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use common version control commands (git commit, git stash, git rebase) and vendor-specific CLI commands (mergify stack push, mergify stack sync, etc.). These are consistent with the skill's stated purpose of managing a development workflow.
  • [DATA_EXPOSURE]: No access to sensitive files (e.g., .ssh, .aws/credentials) or hardcoded secrets were detected. The commands operate on the local git repository's metadata and commit history.
  • [REMOTE_CODE_EXECUTION]: The skill does not contain patterns for downloading and executing untrusted code. It references the mergify CLI, which is a vendor-provided tool (mergifyio).
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected. The instructional language is standard for a technical guide.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 07:44 AM