git-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest potentially untrusted data from git history and diffs to automatically generate Pull Request titles and summaries.
- Ingestion points: The skill uses output from
git log main..HEAD --onelineandgit diff main...HEAD --statas context for drafting PR content. - Boundary markers: Absent. There are no explicit instructions to delimit the log data or ignore embedded instructions within commit messages.
- Capability inventory: The skill has the capability to execute shell commands, specifically
gitandgh(GitHub CLI) to create Pull Requests. - Sanitization: Absent. The skill does not provide methods to sanitize or filter the content extracted from the git history before it is processed by the agent.
Audit Metadata