restack
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill directs the agent to examine PR descriptions to determine test baselines and passing criteria. Because pull request descriptions are untrusted external data, an attacker could potentially embed malicious instructions designed to influence the agent's behavior during the restacking process. This is categorized as a low-severity vulnerability surface typical of agents that process external documentation.
Audit Metadata