creating-pull-request
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from
.github/PULL_REQUEST_TEMPLATE.mdwithin the local repository to populate pull request descriptions, creating a surface for malicious instructions to influence the agent's behavior.\n - Ingestion points:
.github/PULL_REQUEST_TEMPLATE.mdfile located in the user's repository.\n - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands within the template content.\n
- Capability inventory:
gh pr create(network and repository write access) andgit push(network and repository write access).\n - Sanitization: Absent; the instructions do not require validation or sanitization of the template content before it is passed to the GitHub CLI.
Audit Metadata