pr-creator

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or data exfiltration attempts were detected in the skill instructions.
  • [COMMAND_EXECUTION]: The skill utilizes the standard gh CLI (GitHub CLI) to create pull requests. This is a legitimate and expected tool for the skill's stated purpose.
  • [DATA_EXPOSURE]: The skill reads repository templates (e.g., .github/pull_request_template.md) and writes PR descriptions to temporary files. These are standard operations for drafting pull requests and do not involve access to sensitive system files, environment variables, or credentials.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns, such as piping network content to a shell or downloading untrusted scripts, were found.
  • [PROMPT_INJECTION]: The instructions are clear and do not contain attempts to override safety filters or bypass agent constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 12:23 AM
Security Audit — agent-trust-hub — pr-creator