flow-next-make-pr
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill automates the creation of Pull Requests by gathering metadata from local files (specs, tasks, and memory entries) and git diffs. It does not perform any unauthorized data exfiltration or access sensitive user credentials beyond using the already authenticated GitHub CLI (
gh). - [SAFE]: No remote code execution or untrusted dependency downloads were identified. The skill relies on locally available tools and a bundled script (
flowctl) whose path is derived from the plugin's root directory. - [SAFE]: The skill implements a safety gate for interactive users via the
AskUserQuestiontool, requiring an explicit 'create' selection before any branch is pushed or a PR is opened. This prevents accidental or autonomous-only state changes without user oversight in standard operating modes. - [SAFE]: Extensive 'Hallucination guardrails' are documented to ensure that the generated PR body is strictly grounded in actual repository data, preventing the AI from inventing file paths, commit hashes, or rationale.
- [SAFE]: Proper resource management is demonstrated through the use of
mktempfor temporary files andtrapfor cleanup on script exit.
Audit Metadata