create-pr
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill automates several shell commands including
git status,git branch,git log,git diff,git add,git commit, andgit push. These are standard operations for code management. It also uses thegh pr createcommand to interface with the GitHub API.- [DATA_EXFILTRATION]: Network operations are limited togit pushandgh pr create. These target the repository's origin and the official GitHub platform, which is consistent with the skill's primary function of submitting code contributions.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads external project data that is then processed by the agent. - Ingestion points:
git log,git diff,.github/PULL_REQUEST_TEMPLATE.md,CLAUDE.md, and user-provided$ARGUMENTS. - Boundary markers: Not specified.
- Capability inventory: File system writes (to
.changeset/) and network writes (viagit pushandgh). - Sanitization: Not specified.
Audit Metadata