meta-pr-creation
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development tools to perform repository operations, including
gitfor commit verification and rebasing,gh(GitHub CLI) for pull request creation and state management, andpnpmfor running build and test scripts. - [INDIRECT_PROMPT_INJECTION]: The skill relies on external repository files such as
AGENTS.mdandSECURITY.mdto guide its procedures. This creates a surface where instructions embedded in those repository files could influence the agent's behavior during the PR creation process. - Ingestion points:
AGENTS.md,SECURITY.md, and individualSKILL.mdfiles within the repository. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded prompts in the ingested files.
- Capability inventory: The agent has shell access to execute
git,gh, andpnpmcommands. - Sanitization: No sanitization or validation of the content read from the repository files is mentioned.
Audit Metadata