cross-repo-pr-sync
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands and Git CLI to interact with repositories, manage branches, and update local state files. It also uses Python subprocesses and inline Python commands for configuration parsing and worker coordination.\n- [EXTERNAL_DOWNLOADS]: Data is retrieved from external git repositories and the GitHub API to analyze upstream changes. These operations are performed on well-known services as part of the skill's core synchronization logic.\n- [PROMPT_INJECTION]: The skill ingests untrusted PR content and commit messages from upstream sources to populate developer checklists. This is a primary function of the skill.\n
- Ingestion points: Titles and bodies of external Pull Requests and Git commit messages retrieved via Git and GitHub API.\n
- Boundary markers: None explicitly used in the templates.\n
- Capability inventory: Git command execution, local file system writes for state and checklists, and network access to the GitHub API.\n
- Sanitization: PR content is interpolated directly into Markdown checklists without specialized sanitization logic.
Audit Metadata