merge-prep

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands (git rev-parse, git status, git log, git diff, git merge-tree) to analyze branch status and detect potential conflicts. All commands are standard git operations intended for metadata analysis and do not modify the repository state.
  • [REMOTE_CODE_EXECUTION]: A bash script (scripts/pre-merge-check.sh) is executed at runtime. The script is part of the skill's own package and performs benign analysis tasks (commit counting, ancestor detection, conflict dry-runs). It does not download or execute code from external sources.
  • [DATA_EXPOSURE]: The skill analyzes local repository metadata (branch names, commit messages, file paths). This data remains within the agent's context and the user's local environment for the purpose of generating a merge report.
  • [SAFE]: The skill explicitly prohibits auto-merging, auto-pushing, or auto-committing, ensuring the user retains full control over the execution of the suggested commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 01:44 PM
Security Audit — agent-trust-hub — merge-prep