pr-body
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation in
references/image-attachments.mdrecommends the installation of a third-party GitHub CLI extension usinggh extension install drogers0/gh-image. This action downloads and installs code from an external repository maintained by a third party. - [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands, specifically
git diff --statandgit diff --name-only, to analyze the repository state. It also utilizesgh pr createandgh pr editto submit the generated content to GitHub. - [PROMPT_INJECTION]: The skill processes untrusted data from
git diffoutputs which could potentially lead to indirect prompt injection if malicious instructions are embedded within file names or repository code changes. - Ingestion points:
git diffcommand output as described in Step 0 ofSKILL.md. - Boundary markers: The skill uses a structured hierarchical analysis (L0-L4) and specific Markdown templates to partition data analysis from the final output.
- Capability inventory:
gitfor reading repository data;ghfor creating and editing pull requests;gh image(extension) for uploading assets. - Sanitization: No specific sanitization or filtering of the
git diffdata is documented before it is incorporated into the PR body template.
Audit Metadata