flux-opencode-gate
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard system commands including
gitandgh(GitHub CLI) to manage pull requests and environment branches. It also invokes a local binary,fluxctl, located within the.opencode/bin/directory. These operations are restricted to the local workspace and official project configuration. - [DATA_EXFILTRATION]: The skill reads deployment metadata and branch configurations from
.flux/config.json. This data is used solely for determining target branches and staging URLs within the internal workflow. - [PROMPT_INJECTION]: The skill incorporates acceptance criteria from project epics to guide automated testing.
- Ingestion points: Acceptance criteria are retrieved from recently completed epics in the project context.
- Boundary markers: The instructions do not define specific delimiters to isolate the external epic content from the core validation logic.
- Capability inventory: The agent has access to
gitfor repository management,ghfor PR creation, and the localfluxctlutility. - Sanitization: No specific sanitization logic is implemented for the epic content; however, the impact is limited to validation reporting and human-reviewed PR creation.
Audit Metadata