pr
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository history and existing PR metadata which could contain malicious instructions.
- Ingestion points:
SKILL.md(Workflow steps 1, 2, 3, and 5) retrieves data fromgit log,git diff, andgh pr view. - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands in the ingested content.
- Capability inventory: The skill possesses the ability to execute
git push,gh pr create, andgh pr editcommands. - Sanitization: No methods are defined for validating or escaping external content before it is processed or used in subsequent command arguments.
Audit Metadata