gh-stack
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
gh-stackextension from the official GitHub organization's repository. This is a standard and expected operation for the GitHub CLI environment. - [COMMAND_EXECUTION]: Executes common development commands via
ghandgitto handle branch lifecycle management, PR synchronization, and merging operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes data that may be influenced by external contributors, such as branch names and pull request metadata.
- Ingestion points: Ingests branch and PR state via
gh stack view --jsonas defined inSKILL.md. - Boundary markers: The skill leverages structured JSON output to provide clear separation between data and control logic.
- Capability inventory: Includes capabilities for repository modification such as
gh stack merge,gh stack push, andgit commitas detailed inreferences/commands.md. - Sanitization: Prevents misinterpretation by mandating specific non-interactive flags like
--json,--auto, and--yesfor agent operations.
Audit Metadata