dsh-pre-push-checks
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local build and test workflows.
- Evidence: Commands include
bun run build,bun run typecheck, andbun exec vitestfor repository hygiene and validation. - Tooling: Utilizes the
bunruntime andvitestframework to exercise project-specific scripts. - [COMMAND_EXECUTION]: The skill manages remote repository states using standard Git and GitHub CLI operations.
- Evidence: Commands such as
git status,git push --force-with-lease, andgh pr checksare used to interact with the repository and GitHub PRs. - Safety: Encourages the use of
--force-with-leaseto prevent accidental history overwrites. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository data which serves as a potential injection surface.
- Ingestion points: Data enters the agent context through
git statusand thechange-scopescript output which inspects file diffs. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided.
- Capability inventory: The skill can execute local test scripts and interact with the GitHub API via
gh. - Sanitization: Content from the repository is processed without explicit sanitization or filtering.
Audit Metadata