ship
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses local developer tools, specifically Git and the GitHub CLI (
gh), to perform routine tasks such as checking PR status, merging branches, and pulling updates from the main branch. All commands use fixed flags or well-defined arguments. - [INDIRECT_PROMPT_INJECTION]: Ingests external data during the deployment and CI verification process.
- Ingestion points: Reads CI failure logs via
gh run view --log-failedand deployment metadata from the GitHub API. - Boundary markers: Absent; the skill does not explicitly use delimiters when processing log content for summarization.
- Capability inventory: Includes the ability to merge code (
gh pr merge) and switch branches (git checkout). - Sanitization: No explicit sanitization of log output is mentioned, though the skill's logic is restricted to specific deployment-related actions.
Audit Metadata