update-pr-summary
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from Pull Request metadata and codebase diffs to generate summaries.
- Ingestion points: The skill reads Pull Request titles and descriptions using
gh pr viewand code changes viagit diff(SKILL.md). - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore instructions found within the fetched data.
- Capability inventory: The skill possesses the capability to modify remote Pull Request metadata using the
gh pr editcommand (SKILL.md). - Sanitization: No sanitization or validation is performed on the ingested content before it is processed by the language model.
Audit Metadata