file-pr
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill primarily uses standard command-line tools such as
gitand the GitHub CLI (gh) to manage the pull request lifecycle, which is consistent with its stated purpose. - [SAFE]: All network operations are directed towards GitHub (
github.com), which is recognized as a well-known and trusted service. - [SAFE]: The instructions explicitly mandate security best practices, such as requiring encrypted transport (HTTPS or SSH) for Git remotes and prohibiting the storage of credentials.
- [SAFE]: The skill implements a robust verification framework using cryptographic hashes (SHA-256, Git tree/commit SHAs) to ensure local and remote states are synchronized and uncorrupted before performing any repository mutations.
- [SAFE]: The composition of PR titles and bodies follows strict internal rules and verification steps, minimizing the risk of accidental or malicious content injection.
Audit Metadata