arkweb-security-patch-merge
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git commands (
git apply,git apply --check,git apply --3way,git diff) and helper scripts (normalize_patch.mjs,plan_batch.mjs,issue_diff_scope.mjs,validate_merge_result.mjs). These are routine for a version control and patch management workflow. - [EXTERNAL_DOWNLOADS]: The skill processes patch files provided via
context.requirements, which is the standard input mechanism for this automation framework. It does not perform arbitrary remote downloads or remote code execution. - [DATA_EXFILTRATION]: There is no evidence of credential harvesting or exfiltration of sensitive data to external servers. Operations are performed within the defined project root and workflow output directories.
- [PROMPT_INJECTION]: The skill uses structured instructions focusing on patch normalization and verification. It does not contain jailbreak patterns or attempts to override system safety guidelines.
Audit Metadata