backport
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes local git and gh (GitHub CLI) commands to manage branches, cherry-pick commits, and create pull requests. This is the core functionality of the skill and is implemented with multiple safety constraints, such as verifying authentication and checking the working tree state before proceeding.
- External Resource Reference: The skill references and downloads configuration from the project's own
.github/copilot-instructions.mdand standard npm registries for validation purposes. These are standard development practices for the intended environment. - Sensitive File Access Consideration: The workflow involves reading local git configuration and environment variables for the GitHub CLI. These operations are scoped to the project's repository and the user's authenticated session, following standard development workflows.
- Conflict Management Policy: The skill defines a policy for handling merge conflicts that prioritizes user confirmation for non-trivial cases and implements a stricter, non-interactive 'WIP' commit strategy when running in cloud environments, which helps prevent unintended code changes.
Audit Metadata