jewel-pr-preparer
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the
Bashtool to perform git operations, run build scripts likegradlewandbazel.cmd, and execute local Kotlin scripts. These operations are core to the skill's purpose of preparing pull requests within the established development environment. - [REMOTE_CODE_EXECUTION]: The skill runs a local Python script
suggest_reviewers.pyincluded in its package. This script executes the GitHub CLI (gh) viasubprocess.check_outputwith a safely constructed command list to fetch reviewer metadata. - [DATA_EXFILTRATION]: The skill uses the GitHub CLI (
gh) to interact with theJetBrains/intellij-communityrepository, creating pull requests and querying open PR data. These network operations are intended and scoped to the vendor's repository. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by processing data from the repository's history and current diffs.
- Ingestion points: Reads output from
git logandgit diffto generate content for PR titles, descriptions, and release notes. - Boundary markers: Does not utilize specific delimiters or instructions to ignore potential commands within the ingested git data.
- Capability inventory: The skill has access to tools like
Bashand theghCLI, which provide command execution and network capabilities. - Sanitization: No sanitization or filtering is applied to the data retrieved from the repository's history or file changes.
Audit Metadata