prepare-merge-request
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local CLI tools including
gitfor version control,./gradlewfor builds, andadbfor Android device management. - [REMOTE_CODE_EXECUTION]: Contains an inline Python script executed via a shell heredoc. The script parses local JUnit XML files to count test successes and failures. It only uses standard libraries (
os,re,collections) and does not perform any network activity. - [CREDENTIALS_UNSAFE]: Includes a dedicated security gate (Step 1.2) that uses
grepto scan for sensitive files like.env,keystore, andcredentialfiles before they are added to the git index, which is a positive security practice. - [COMMAND_EXECUTION]: Utilizes
findto remove stale build directories (test-results) to ensure that verification steps reflect the most recent test run.
Audit Metadata