skills/dvdksn/docs/create-pr/Gen Agent Trust Hub

create-pr

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git for local branch verification and pushing, and the GitHub CLI (gh) for creating pull requests and interacting with the GitHub API.
  • [DATA_EXFILTRATION]: The skill executes git push to upload local changes to a remote repository. This is the core intended functionality for contributing code to the docker/docs project.
  • [PROMPT_INJECTION]: The skill ingests data from GitHub issue timelines using the gh api. This introduces an indirect prompt injection surface where content from external issues is processed to decide whether to skip PR creation. The risk is considered low as the data is structurally parsed via jq and the skill is limited to a specific repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 10:21 AM
Security Audit — agent-trust-hub — create-pr