skills/remotion-dev/remotion/merge/Gen Agent Trust Hub

merge

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the standard GitHub CLI (gh) to perform legitimate pull request operations, including viewing PR details, monitoring status checks, and executing merges.
  • [SAFE]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network communication was found. All operations are confined to the GitHub environment via official tooling.
  • [SAFE]: The skill references internal workflows (pr-ready and flake) through relative local paths, which is standard practice for monorepo skill organization.
  • [SAFE]: Although the skill processes external data (PR metadata and CI logs), it does so within the context of a developer automation tool without using dangerous execution patterns like eval() or os.system() on the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 03:42 PM
Security Audit — agent-trust-hub — merge