create-mr
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local git commands and official platform CLI tools (
gh,glab) to manage repository state. These operations are within the expected scope of a development-focused skill for creating merge requests. - [SAFE]: The skill implements strong guardrails for sensitive operations. It explicitly requires user confirmation before performing a
git pushor creating an MR/PR, preventing accidental data exposure. It also uses file-based description handling to avoid shell injection risks when passing long text to CLI commands. - [SAFE]: URL normalization and platform detection are performed locally using standard string manipulation. No external dependencies are downloaded at runtime, and the scripts interact only with the user's configured git remotes and authenticated platform accounts.
Audit Metadata