update-pr
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
gitfor repository management (status, diff, fetch, merge, push) and the GitHub CLI (gh) for viewing and editing Pull Request metadata. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it reads and processes external data to generate PR updates.
- Ingestion points: Pull Request titles and bodies are retrieved via
gh pr view, and local repository templates are read from.github/pull_request_template.md. - Boundary markers: Absent. The instructions do not define delimiters or warnings to ignore embedded instructions within the ingested data.
- Capability inventory: The agent has shell access to execute
gitandghcommands based on the processed data. - Sanitization: Absent. The skill does not describe any sanitization or validation logic for the ingested PR content.
- [DATA_EXPOSURE]: The skill includes explicit instructions to exclude secrets and unrelated local changes during the staging process, which aligns with standard security best practices.
Audit Metadata