skills/withastro/astro/merge/Gen Agent Trust Hub

merge

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Git commands such as git diff, git rm, git add, and git checkout, alongside PNPM commands like pnpm build and pnpm exec astro-scripts test. These operations are standard for development workflows and are used here to resolve merge conflicts and verify build integrity.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from CI logs and repository changeset files, creating a surface for potential indirect instructions.
  • Ingestion points: The skill reads ciLogs passed as an argument in fix-ci.md and parses .changeset/*.md files in clean-changesets.md to identify stale releases.
  • Boundary markers: There are no explicit instructions for the agent to treat the content of these logs or files as strictly passive data, which is common in development automation tools.
  • Capability inventory: The agent has the authority to modify source code, delete files, and execute build and test scripts.
  • Sanitization: The skill relies on the agent's default processing of text without specific filtering or escaping of the ingested log or changeset content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 06:45 PM
Security Audit — agent-trust-hub — merge