antdv-next-cli-create-pr
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several shell-based tools including
git,gh(GitHub CLI), andpnpm. It performs write operations such asgit pushandgh pr createas part of its core functionality for repository management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources that could be influenced by third parties (e.g., git commit messages or code diffs from contributors) and uses this data to generate pull request descriptions.
- Ingestion points: The skill reads git history via
git logandgit diffinSKILL.md(Step 3). - Boundary markers: No specific delimiters are defined to separate the ingested git data from the agent's internal instructions when drafting the PR.
- Capability inventory: The skill has the ability to execute repository write commands and run local build/test scripts (
pnpm test,pnpm build). - Sanitization: The risk is mitigated by a mandatory human review and confirmation step (Step 10 and 11) required before any code is pushed or a PR is created.
Audit Metadata