rebasing-open-prs
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to execute standard development tools including git, gh (GitHub CLI), and jq for repository management and data processing.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from GitHub PR metadata (titles, branch names) and repository file contents during rebase operations.
- Ingestion points: The
list-prs.shscript fetches PR details via the GitHub API. Subagents read file contents when resolving rebase conflicts inper-pr-procedure.md. - Boundary markers: The workflow requires a manual confirmation step from the user before any changes are pushed to the remote repository.
- Capability inventory: The skill possesses the ability to execute shell commands, perform network operations via
git fetchandgit push, and modify the filesystem through worktree creation. - Sanitization: The
list-prs.shscript implements a proactive security check using a regular expression (^[A-Za-z0-9._/-]+$) to ensure branch names contain only safe characters, effectively mitigating command injection risks during shell interpolation.
Audit Metadata