git-trunk-branch-and-pr-automation
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation of tools and extensions from trusted sources and well-known services, such as the official GitHub CLI stack extension and Graphite workflows.
- [REMOTE_CODE_EXECUTION]: The provided GitHub Action templates (
pr-title-manager.yml) implement high-security patterns by segregating execution modes. It explicitly prevents checking out or running script files from fork pull requests, using inline validation instead to mitigate risks from contributor-modified code. - [COMMAND_EXECUTION]: Documentation includes instructions for standard Git and branch management commands (
gh stack,gt). These are handled safely through environment variables in the provided workflow templates to prevent command injection. - [SAFE]: The normalization logic in
normalize-pr-title.jsand validation inbranch-name-check.ymluse robust regular expressions and actor-based filtering to prevent automation loops and ensure consistent release metadata.
Audit Metadata