skills/bhagyamudgal/skills/file-pr/Gen Agent Trust Hub

file-pr

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill primarily uses standard command-line tools such as git and the GitHub CLI (gh) to manage the pull request lifecycle, which is consistent with its stated purpose.
  • [SAFE]: All network operations are directed towards GitHub (github.com), which is recognized as a well-known and trusted service.
  • [SAFE]: The instructions explicitly mandate security best practices, such as requiring encrypted transport (HTTPS or SSH) for Git remotes and prohibiting the storage of credentials.
  • [SAFE]: The skill implements a robust verification framework using cryptographic hashes (SHA-256, Git tree/commit SHAs) to ensure local and remote states are synchronized and uncorrupted before performing any repository mutations.
  • [SAFE]: The composition of PR titles and bodies follows strict internal rules and verification steps, minimizing the risk of accidental or malicious content injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 04:29 PM
Security Audit — agent-trust-hub — file-pr