The Agent Skills Directory

[SAFE]: The GitHub Actions workflows (branch-name-check.yml, pr-title-manager.yml) correctly use environment variables (env) to handle untrusted inputs such as github.head_ref and PR metadata. This practice effectively prevents shell injection vulnerabilities that can occur when untrusted data is interpolated directly into run blocks.
[SAFE]: The pr-title-manager.yml workflow implements a secure execution model by distinguishing between same-repository PRs and those from forks or external bots. It only checks out and executes the local normalize-pr-title.js script for same-repository PRs. For untrusted sources, it performs inline validation using github-script to prevent the execution of potentially malicious code modifications from a pull request.
[SAFE]: All GitHub Actions used in the templates reference specific commit SHAs (e.g., actions/checkout@3d3c42...) rather than mutable tags. This ensures that the workflows use immutable versions of their dependencies, protecting against supply chain attacks.
[SAFE]: The skill refers to well-known technology services (Graphite) and official tools (GitHub CLI extensions) using neutral, informative language. No unverifiable or risky remote code execution patterns were detected.

git-trunk-branch-and-pr-automation