ship-pr
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system commands via the 'gh' and 'tea' CLI tools for repository management and pull request workflows. It also automates the execution of local package managers to install dependencies.- [INDIRECT_PROMPT_INJECTION]: The skill reads and acts upon external data from forge APIs, such as pull request reviews and CI status checks. This content is used to inform automated 'minor' repairs. The skill includes constraints to prevent autonomous execution of 'substantial' changes, requiring user direction instead.
Audit Metadata