create-pr
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitfor local branch verification and pushing, and the GitHub CLI (gh) for creating pull requests and interacting with the GitHub API. - [DATA_EXFILTRATION]: The skill executes
git pushto upload local changes to a remote repository. This is the core intended functionality for contributing code to the docker/docs project. - [PROMPT_INJECTION]: The skill ingests data from GitHub issue timelines using the
gh api. This introduces an indirect prompt injection surface where content from external issues is processed to decide whether to skip PR creation. The risk is considered low as the data is structurally parsed viajqand the skill is limited to a specific repository.
Audit Metadata