release-cherry-pick-missing-reverts
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes local shell commands using
gitandgh(GitHub CLI) to manage branches, perform cherry-picks, and create pull requests. This is standard behavior for a repository management tool. - External Data Interaction: The skill retrieves workflow logs from GitHub Actions and fetches repository metadata using the
ghAPI. These operations target the officialpytorch/pytorchandpytorch/test-infrarepositories, which are recognized sources for this workflow. - Data Parsing Considerations: The skill parses information such as commit titles and PR numbers from external log files to populate parameters for PR creation and issue commenting. While this is necessary for its intended purpose, it is a point where external data influences command arguments. The skill addresses this by recommending a review of the planned actions before they are executed.
- Authentication Management: The skill relies on existing local authentication for the
ghCLI andgit, following standard security practices by not hardcoding or requesting credentials directly.
Audit Metadata