create-pr
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands including
gitandgh(GitHub CLI) to gather repository context and automate the pull request submission process. - [COMMAND_EXECUTION]: Instructions direct the agent to execute standard development tasks such as linting, testing, and building using well-known tools like
npm,pnpm,pytest,ruff, andmypy. - [EXTERNAL_DOWNLOADS]: The skill references the use of established security scanning tools, such as
gitleaksandtrufflehog, to detect hardcoded secrets and sensitive files during pre-submission validation. - [SAFE]: Implements a structured quality gate and failure resolution process to ensure all checks pass before a pull request is created.
- [SAFE]: Uses dynamic context injection in the
SKILL.mdfile for benign repository status checks such asgit status,git branch, andgh auth status.
Audit Metadata