skills/fuzzyfox/skills/open-pr/Gen Agent Trust Hub

open-pr

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill uses established tools, specifically the GitHub CLI (gh) and the Linear MCP, for its core functionality of pull request and issue management.
  • [COMMAND_EXECUTION]: The skill executes gh pr create to automate pull request drafting and submission, which is a legitimate and safe use of the tool.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes git history and branch names to generate PR content. Ingestion points: git branch names, commit messages, and diffs. Boundary markers: none. Capability inventory: GitHub CLI (network/API) and Linear MCP (network/API). Sanitization: none. This behavior is standard for this type of utility and is not considered a threat.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 04:10 PM
Security Audit — agent-trust-hub — open-pr