ship-pr
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, specifically GitHub Pull Request comments (AI reviewer feedback) and CI check logs.
- Ingestion points: Reads and acts upon feedback from AI reviewers and CI failure logs in SKILL.md.
- Boundary markers: None explicitly defined in the prompt instructions to isolate external feedback from the agent's core instructions.
- Capability inventory: Modifies local files to address failures, executes GitHub API calls (merging, status updates), and sends messages to Discord using vendor-provided modules defined in SKILL.md.
- Sanitization: Relies on the agent's standard logic to address feedback without specific sanitization routines for the external input.
Audit Metadata