commit-push-pr
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs standard development tasks using established command-line tools.
- [COMMAND_EXECUTION]: The skill executes Git and GitHub CLI commands to fulfill its workflow, which is consistent with its stated purpose.
- [DATA_EXFILTRATION]: The skill pushes code to a remote repository and creates PRs. This is the intended behavior and relies on the user's pre-configured Git remotes and GitHub credentials.
- [PROMPT_INJECTION]: The skill instructs the agent to analyze file diffs and commit history. While this exposes the agent to untrusted codebase content, the risk is minimal and inherent to automated code summarization.
Audit Metadata