skills/jnsahaj/skills/create-draft-pr/Gen Agent Trust Hub

create-draft-pr

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands including git and gh (GitHub CLI) to manage repository state and interact with remote APIs. This includes operations like git status, git commit, git push, and gh pr create to create the pull request.
  • [DATA_EXFILTRATION]: The skill uses git push to transmit local source code changes to a remote repository. While this involves sending data over the network, it is the documented and necessary function for version control and pull request creation.
  • [PROMPT_INJECTION]: The skill processes untrusted input from the local repository which creates an indirect prompt injection surface.
  • Ingestion points: The skill reads repository content using git status, git diff, and git log commands.
  • Boundary markers: No boundary markers or 'ignore' instructions are present to encapsulate the ingested data.
  • Capability inventory: The skill can execute shell commands and perform network operations via git and gh tools.
  • Sanitization: Repository content is not explicitly sanitized or validated before being processed by the agent to generate descriptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 03:05 PM
Security Audit — agent-trust-hub — create-draft-pr