create-draft-pr
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including
gitandgh(GitHub CLI) to manage repository state and interact with remote APIs. This includes operations likegit status,git commit,git push, andgh pr createto create the pull request. - [DATA_EXFILTRATION]: The skill uses
git pushto transmit local source code changes to a remote repository. While this involves sending data over the network, it is the documented and necessary function for version control and pull request creation. - [PROMPT_INJECTION]: The skill processes untrusted input from the local repository which creates an indirect prompt injection surface.
- Ingestion points: The skill reads repository content using
git status,git diff, andgit logcommands. - Boundary markers: No boundary markers or 'ignore' instructions are present to encapsulate the ingested data.
- Capability inventory: The skill can execute shell commands and perform network operations via
gitandghtools. - Sanitization: Repository content is not explicitly sanitized or validated before being processed by the agent to generate descriptions.
Audit Metadata