git-pr
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content (PR titles and descriptions) to generate GitHub pull requests.
- Ingestion points: User-provided text for PR summary, changes, and test plans (SKILL.md).
- Boundary markers: The workflow uses shell-quoted heredocs (cat <<'EOF') when invoking the gh CLI, which prevents the shell from interpolating environment variables or executing commands within the content.
- Capability inventory: Uses the Bash tool to execute git and gh commands (SKILL.md).
- Sanitization: The use of quoted heredocs is a strong sanitization practice for command-line arguments.
Audit Metadata