git-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitandgh(GitHub CLI) to automate repository management tasks. Specifically, it executesgit push,git log,gh pr create, andgh pr viewto manage the lifecycle of code contributions and documentation. - [PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions, representing an indirect prompt injection surface.
- Ingestion points: Reads repository metadata and templates from
.github/ISSUE_TEMPLATE/,.github/PULL_REQUEST_TEMPLATE.md, and existing commit messages viagit log. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested content.
- Capability inventory: The skill has the capability to write to the repository and open pull requests using
gitandghtools. - Sanitization: No explicit sanitization or filtering is performed on the data fetched from commit logs or templates before it is interpolated into PR or issue bodies.
Audit Metadata