merge
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the standard GitHub CLI (
gh) to perform legitimate pull request operations, including viewing PR details, monitoring status checks, and executing merges. - [SAFE]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network communication was found. All operations are confined to the GitHub environment via official tooling.
- [SAFE]: The skill references internal workflows (
pr-readyandflake) through relative local paths, which is standard practice for monorepo skill organization. - [SAFE]: Although the skill processes external data (PR metadata and CI logs), it does so within the context of a developer automation tool without using dangerous execution patterns like
eval()oros.system()on the ingested data.
Audit Metadata