manage-pr
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill uses standard tools for their intended purpose.
- [COMMAND_EXECUTION]: The skill uses git and gh for repository management. All commands follow established workflows for pull request creation and branch rebasing.
- [DATA_EXFILTRATION]: Communication with external services is limited to GitHub via the official gh CLI tool. No access to sensitive local credentials or configuration files was detected.
- [PROMPT_INJECTION]: The skill processes external data from repository logs and pull request views. 1. Ingestion points:
SKILL.md(lines referencinggh pr viewandgit logoutput). 2. Boundary markers: Absent. 3. Capability inventory:SKILL.md(usesgit pushandgh pr editto modify remote state). 4. Sanitization: Absent. This data ingestion is a standard requirement for pull request management and does not constitute a malicious attempt to override agent behavior.
Audit Metadata