create-pull-request
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Git and GitHub CLI commands to manage the pull request lifecycle, including fetching branch information, generating diffs, and pushing changes. These operations are standard for the skill's purpose and are executed locally.
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context syntax to initialize the agent with the current branch status and commit history. This usage is benign and does not involve network exfiltration or sensitive file access outside the repository scope.
- [INDIRECT_PROMPT_INJECTION]: By reading pull request templates and git diffs, the skill has an ingestion surface for data that could contain malicious instructions. However, the impact is limited as the agent uses this data specifically to construct a pull request body, which requires final user confirmation. Ingestion points: local repository files. Capability inventory: Git and gh CLI tools. Sanitization: PR title regex validation.
Audit Metadata