preparing-pr
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute project-specific and standard shell commands to prepare a PR.
- Commands include:
dt update-flutter-sdk,dt presubmit --fix,git status, andgit diff. - These tools are consistent with the vendor's 'flutter' environment and development workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface where the agent processes potentially untrusted data from the repository.
- Ingestion points: The agent reads output from
git statusandgit diffto identify modified files and determine which tests to run (SKILL.md). - Boundary markers: There are no explicit instructions or delimiters to protect against prompt injection patterns that might be contained within the code diffs being analyzed.
- Capability inventory: The agent has the capability to execute the
dtCLI tool and various test scripts based on the ingested data. - Sanitization: No sanitization or validation of the diff content is performed before the agent uses it to decide which commands to execute.
Audit Metadata