Skills
Navigate
skills/troykelly/claude-skills/verification-before-merge/Gen Agent Trust Hub

verification-before-merge

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources that could be influenced by third parties.
  • Ingestion points: The skill uses gh issue view to read issue bodies and gh pr view to read pull request reviews and discussion threads in SKILL.md.
  • Capability inventory: The skill utilizes the Bash tool to execute git commands (including push --force-with-lease), pnpm for testing/migrations, and gh for merging PRs and closing issues.
  • Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded within the ingested issue or PR text.
  • Sanitization: There is no evidence of sanitization or filtering applied to the content retrieved from GitHub before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:09 PM