pr-link-issue
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several GitHub CLI (
gh) commands to retrieve information (gh pr view,gh issue view) and modify repository content (gh pr edit). These commands are used for their intended purpose of pull request management. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes data from external, untrusted sources.
- Ingestion points: The skill reads GitHub issue comments (
gh issue view) and existing PR descriptions (gh pr view) into the agent's context. - Boundary markers: No specific delimiters or instructions are used to separate untrusted external content from the skill's own operational instructions.
- Capability inventory: The skill possesses the capability to write to the repository via the
gh pr editcommand, which updates the PR body. - Sanitization: While the skill uses a regular expression (
grep -Eioe '[a-z]+-[0-9]+') to strictly extract Linear ticket keys from comments, the overall PR body is manipulated and rewritten by the agent without specific sanitization of existing text, which could potentially contain malicious instructions targeted at the LLM.
Audit Metadata