skills/efoo-team/skills/pr-body/Gen Agent Trust Hub

pr-body

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation in references/image-attachments.md recommends the installation of a third-party GitHub CLI extension using gh extension install drogers0/gh-image. This action downloads and installs code from an external repository maintained by a third party.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands, specifically git diff --stat and git diff --name-only, to analyze the repository state. It also utilizes gh pr create and gh pr edit to submit the generated content to GitHub.
  • [PROMPT_INJECTION]: The skill processes untrusted data from git diff outputs which could potentially lead to indirect prompt injection if malicious instructions are embedded within file names or repository code changes.
  • Ingestion points: git diff command output as described in Step 0 of SKILL.md.
  • Boundary markers: The skill uses a structured hierarchical analysis (L0-L4) and specific Markdown templates to partition data analysis from the final output.
  • Capability inventory: git for reading repository data; gh for creating and editing pull requests; gh image (extension) for uploading assets.
  • Sanitization: No specific sanitization or filtering of the git diff data is documented before it is incorporated into the PR body template.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 02:44 PM
Security Audit — agent-trust-hub — pr-body