pr-stack
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands using git and gh (GitHub CLI) to manage branches, perform rebases, and update pull requests. These operations are within the expected scope of a pull request management tool.
- [SAFE]: The skill processes untrusted data from git diffs to generate commit messages and PR descriptions. Ingestion points: staged diffs and branch diffs in SKILL.md. Boundary markers: Absent. Capability inventory: Git and GitHub CLI commands. Sanitization: Absent. The behavior is consistent with standard developer tools and no malicious intent or security vulnerabilities were detected.
- [SAFE]: No obfuscation, data exfiltration patterns, or persistence mechanisms were found in the analyzed instructions and configurations.
Audit Metadata