cascading-fleet
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a series of shell commands via a Bash script to automate repository management. This includes performing
gitoperations (worktree, fetch, commit, push), using theghCLI to create pull requests, and invokingnodeto run scripts. - [COMMAND_EXECUTION]: The script references and executes a TypeScript file (
cli.mts) located in a sibling repository (socket-wheelhouse). This represents a cross-repository dependency used for scaffolding synchronization within the vendor's project structure. - [COMMAND_EXECUTION]: Automated commits and pushes use the
FLEET_SYNC=1environment variable and the--no-verifyflag. These are documented mechanisms to bypass specific Git hooks (such asno-revert-guard) that would otherwise block automated sync operations.
Audit Metadata