split-and-ship
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements automated repository workflows using legitimate tools (git and gh). Analysis of the instruction flow confirms that command execution is restricted to repository metadata retrieval, branching, and PR management.
- [SAFE]: No obfuscation, data exfiltration, or credential harvesting patterns were identified. The skill correctly relies on existing user authentication for the GitHub CLI.
- [SAFE]: While the skill processes user-provided split plans, it includes a safety checkpoint by using AskUserQuestion to confirm proposed branch names before creation, reducing the risk of unintended side effects.
Audit Metadata