ship
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
gitand theghCLI for its primary operations. It specifically instructs the agent to run network-related commands (likegit pushandgh pr merge) outside of the platform's sandbox to ensure connectivity to GitHub servers. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local
git statusanddiffdata. This presents an attack surface where instructions embedded in project files could influence the agent's behavior during the grouping or summary generation steps. - Ingestion points:
git statusandgit diffoutputs processed in Step 1. - Boundary markers: No specific delimiters or safety instructions are defined to separate file content from agent instructions.
- Capability inventory:
git(commit, push, checkout) andgh(pull request creation, merging, branch deletion). - Sanitization: No explicit sanitization or filtering of the diff content is described.
- [SAFE]: The skill implements safety rules to prevent the inclusion of sensitive files like
.envor API tokens in commits and prevents irreversible actions like force-pushing. - [SAFE]: All installation and repository references point to the author's official GitHub repository (
github.com/sleeplessv/relentless-data-skills).
Audit Metadata