git-fix-pr
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external data from pull request logs and test results, creating a surface for indirect prompt injection. * Ingestion points: PR status and workflow logs retrieved via 'gh pr checks' and 'mcp__github__pull_request_read' in Step 1 and Step 2. * Boundary markers: Absent. The instructions do not define delimiters for external log data to prevent the agent from obeying instructions embedded in the logs. * Capability inventory: Shell command execution (git, npm, uv), file system modification (Edit), and network operations (git push). * Sanitization: Absent. The skill is designed to analyze raw error messages from logs to determine how to patch the codebase.
- [COMMAND_EXECUTION]: The skill utilizes dynamic context injection to gather Git repository metadata at load time. * Evidence: Static Git commands such as 'git remote -v', 'git branch --show-current', 'git status', 'git diff', and 'git log' are executed using the exclamation-backtick syntax in the Context section. * Context: These commands are used to establish the development environment state and do not accept user-supplied arguments, which mitigates command injection risks and aligns with standard development workflow expectations.
Audit Metadata