pr
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands using standard development tools including
git,gh(GitHub CLI), andbun. These operations are within the expected scope of a pull request management tool. - [DYNAMIC_EXECUTION]: Instructions include running
bun run type-check, which executes project-specific scripts. This is used to verify code integrity before PR submission and is appropriate for the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository environment, such as
git logandgit diffoutput. - Ingestion points: Reads commit messages and file changes via
git logandgit diffin SKILL.md. - Boundary markers: None explicitly defined for the diff parsing step.
- Capability inventory: Contains capabilities to push code (
git push) and create PRs (gh pr create). - Sanitization: None observed; however, the data is processed within the context of a developer's local environment where such metadata is generally expected.
Audit Metadata