guardian
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a well-documented and architected developer tool focused on code review and Git hygiene. It explicitly warns against destructive operations and requires user authorization for significant state changes.
- [COMMAND_EXECUTION]: The skill generates and executes various Git and GitHub CLI (
gh) commands to manage repository state, PRs, and commit history. These operations are standard for the tool's stated purpose and are wrapped in safety checks. - [PRIVILEGE_ESCALATION]: Includes instructions for utilizing the
--adminflag ingh pr mergeto bypass repository branch protections. This capability is documented as a high-risk 'Ask First' operation, ensuring the user is aware of the privilege increase. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external, untrusted data in the form of PR diffs and commit messages. It mitigates potential injection risks by using structured analysis reports and requiring human review for critical decisions like merging or splitting work.
Audit Metadata