Skills
Navigate
skills/rivet-dev/rivet/stack-merge/Gen Agent Trust Hub

stack-merge

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple local shell scripts (scripts/list_merge_path.sh, scripts/validate.sh, scripts/exec_merge.sh) to automate complex Git workflows.
  • [PRIVILEGE_ESCALATION]: The instructions explicitly direct the agent to utilize administrative permissions to bypass GitHub branch protection rules (bypass_pull_request_allowances). This allows pushing directly to the main branch, overriding standard safety filters like mandatory PR reviews or CI gates.
  • [NETWORK_OPERATIONS]: The skill interacts with the GitHub API via the gh CLI to query repository settings and PR status, and it performs git push operations to the remote repository rivet-dev/rivet.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 03:11 PM
Security Audit — agent-trust-hub — stack-merge