dsh-pre-push-checks

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local build and test workflows.
  • Evidence: Commands include bun run build, bun run typecheck, and bun exec vitest for repository hygiene and validation.
  • Tooling: Utilizes the bun runtime and vitest framework to exercise project-specific scripts.
  • [COMMAND_EXECUTION]: The skill manages remote repository states using standard Git and GitHub CLI operations.
  • Evidence: Commands such as git status, git push --force-with-lease, and gh pr checks are used to interact with the repository and GitHub PRs.
  • Safety: Encourages the use of --force-with-lease to prevent accidental history overwrites.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository data which serves as a potential injection surface.
  • Ingestion points: Data enters the agent context through git status and the change-scope script output which inspects file diffs.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided.
  • Capability inventory: The skill can execute local test scripts and interact with the GitHub API via gh.
  • Sanitization: Content from the repository is processed without explicit sanitization or filtering.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 07:37 AM