gh-create-pr
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses standard
gitandghCLI commands to perform common developer tasks like pushing code and opening pull requests. These operations are essential to the skill's documented purpose. - [INDIRECT_PROMPT_INJECTION]: Processes the repository's pull request template file. While this introduces an attack surface for data-driven instructions, the skill mitigates risk by requiring the agent to display the full draft for human review and confirmation before the PR is created.
Audit Metadata