merge
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Git commands such as
git diff,git rm,git add, andgit checkout, alongside PNPM commands likepnpm buildandpnpm exec astro-scripts test. These operations are standard for development workflows and are used here to resolve merge conflicts and verify build integrity. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from CI logs and repository changeset files, creating a surface for potential indirect instructions.
- Ingestion points: The skill reads
ciLogspassed as an argument infix-ci.mdand parses.changeset/*.mdfiles inclean-changesets.mdto identify stale releases. - Boundary markers: There are no explicit instructions for the agent to treat the content of these logs or files as strictly passive data, which is common in development automation tools.
- Capability inventory: The agent has the authority to modify source code, delete files, and execute build and test scripts.
- Sanitization: The skill relies on the agent's default processing of text without specific filtering or escaping of the ingested log or changeset content.
Audit Metadata