mergify-stack
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate operational instructions for the
mergifyCLI tool, which is used for managing stacked pull requests on GitHub. - [COMMAND_EXECUTION]: The skill instructs the agent to use common version control commands (
git commit,git stash,git rebase) and vendor-specific CLI commands (mergify stack push,mergify stack sync, etc.). These are consistent with the skill's stated purpose of managing a development workflow. - [DATA_EXPOSURE]: No access to sensitive files (e.g.,
.ssh,.aws/credentials) or hardcoded secrets were detected. The commands operate on the local git repository's metadata and commit history. - [REMOTE_CODE_EXECUTION]: The skill does not contain patterns for downloading and executing untrusted code. It references the
mergifyCLI, which is a vendor-provided tool (mergifyio). - [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected. The instructional language is standard for a technical guide.
Audit Metadata