not-spam-pr
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository's git history and PR metadata which could be used to host malicious instructions intended to influence the agent's behavior.
- Ingestion points: The skill reads output from
git log -8andgh pr list, and accesses repository-defined files like.github/PULL_REQUEST_TEMPLATE.md(documented inSKILL.mdandreferences/voice.md). - Boundary markers: Absent. The instructions do not specify using delimiters or specific directives to ignore embedded instructions when processing the style of ingested text.
- Capability inventory: The skill is configured with access to
Bash,Read,Grep, andGlobtools, providing a surface for command execution if an injection were successful. - Sanitization: Absent. There is no requirement or instruction to escape or filter content retrieved from the repository history before it is used to influence the generation of new commit messages or PR text.
Audit Metadata