draft-pull-request
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses standard git and gh CLI commands to retrieve repository context and create pull requests. These operations are aligned with the skill's primary purpose.
- [DATA_EXFILTRATION]: Transmits repository metadata and code diffs to GitHub via the gh CLI. GitHub is a trusted service for code hosting and pull request management. No sensitive local files such as credentials or SSH keys are accessed.
- [INDIRECT_PROMPT_INJECTION]: The skill processes commit messages and diffs to generate PR descriptions. While these are external inputs, the resulting PR is created as a draft, which provides a natural human review boundary before any changes are merged.
Audit Metadata