git-pr
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon data from external, potentially untrusted sources within the repository and from GitHub CLI outputs, which represents an indirect prompt injection surface.
- Ingestion points: The agent reads content from
CONTRIBUTING.md,AGENTS.md, PR templates, CI configurations, pull request comments viagh pr view, and CI failure logs viagh run view. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the external content being processed.
- Capability inventory: The agent has the capability to execute
gitandghCLI commands, including staging, committing, pushing, and managing worktrees. - Sanitization: The skill does not describe any sanitization or validation of the fetched external content before it is used to influence the agent's actions or commands.
Audit Metadata