create-pr

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates several shell commands including git status, git branch, git log, git diff, git add, git commit, and git push. These are standard operations for code management. It also uses the gh pr create command to interface with the GitHub API.- [DATA_EXFILTRATION]: Network operations are limited to git push and gh pr create. These target the repository's origin and the official GitHub platform, which is consistent with the skill's primary function of submitting code contributions.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads external project data that is then processed by the agent.
  • Ingestion points: git log, git diff, .github/PULL_REQUEST_TEMPLATE.md, CLAUDE.md, and user-provided $ARGUMENTS.
  • Boundary markers: Not specified.
  • Capability inventory: File system writes (to .changeset/) and network writes (via git push and gh).
  • Sanitization: Not specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 02:25 AM
Security Audit — agent-trust-hub — create-pr