create-fix-pr
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains a potential surface for indirect prompt injection as it clones external repositories and reads configuration files within them (such as agents.md or CLAUDE.md). This content could theoretically contain instructions designed to influence the agent's behavior when filing a PR.
- Ingestion points: gh repo clone command and Read operations on files within the cloned repository.
- Boundary markers: No explicit delimiters are used to separate untrusted repository content from instructions.
- Capability inventory: The skill utilizes shell commands (git, gh) and file system manipulation tools (Edit, Read, Grep).
- Sanitization: No specific sanitization or escaping of the repository content is mentioned before it is processed by the agent.
Audit Metadata