skills/keenableai/lobehub/pr/Gen Agent Trust Hub

pr

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands using standard development tools including git, gh (GitHub CLI), and bun. These operations are within the expected scope of a pull request management tool.
  • [DYNAMIC_EXECUTION]: Instructions include running bun run type-check, which executes project-specific scripts. This is used to verify code integrity before PR submission and is appropriate for the skill's primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository environment, such as git log and git diff output.
  • Ingestion points: Reads commit messages and file changes via git log and git diff in SKILL.md.
  • Boundary markers: None explicitly defined for the diff parsing step.
  • Capability inventory: Contains capabilities to push code (git push) and create PRs (gh pr create).
  • Sanitization: None observed; however, the data is processed within the context of a developer's local environment where such metadata is generally expected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 09:40 AM