vs-ship-it
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git and GitHub CLI commands (
git branch,git status,git commit,git push,gh pr create,gh pr checks) to automate a typical developer workflow. These commands are executed locally within the user's project context to facilitate branch management and PR creation. - [DATA_EXFILTRATION]: The skill generates a summary of the AI session context to include in the PR description. The instructions explicitly direct the agent to exclude sensitive data such as exact user prompts, personal information, and credentials, ensuring only technical rationale and problem-solving strategies are shared.
- [REMOTE_CODE_EXECUTION]: No patterns for remote code execution or untrusted downloads were detected. The installation method mentioned in the README uses a standard package runner (npx) from a known repository path.
Audit Metadata