open-draft-pr
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git commands to sign commits and push code to remote repositories.- [DYNAMIC_EXECUTION]: The skill executes a local JavaScript file located at .github/scripts/check-pr-deferrals.mjs using the Node.js runtime to perform PR content checks.- [INDIRECT_PROMPT_INJECTION]: The skill reads external content from body.md and passes it to a validation script via an environment variable, providing a surface for untrusted data ingestion.
- Ingestion points: body.md
- Boundary markers: None present
- Capability inventory: Shell command execution (git, node)
- Sanitization: No sanitization performed on ingested file content
Audit Metadata