skills/jcosta33/skills/git-pr/Gen Agent Trust Hub

git-pr

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill explicitly instructs against using catch-all staging commands like git add -A or git add ., warning that these methods can lead to the accidental exposure of sensitive data such as .env files, credentials, or debug prints in the repository history.
  • [SAFE]: The guide outlines a disciplined process for managing Pull Requests and CI failures using official tools like the GitHub CLI (gh). While this involves reading external content (PR comments and CI logs) which constitutes an indirect prompt injection surface, the activity is focused on diagnostic and communicative tasks in a standard development workflow.
  • [SAFE]: The recommendation to use Git worktrees for parallel tasks ensures environmental isolation, preventing accidental state contamination or code leakage between different branches or feature developments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 06:02 PM
Security Audit — agent-trust-hub — git-pr