git-pr
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitand the GitHub CLI (gh) to perform repository management tasks including branch operations, log analysis, and PR creation. These operations are restricted to the local environment and the project's remote repository. - [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub's official services. These network operations target a well-known service and are part of the skill's core functionality for pull request management.
- [PROMPT_INJECTION]: The instructions include specific guidance on using
--body-fileand temporary files when creating PR descriptions. This is a security best practice that prevents the model from accidentally executing shell commands when processing untrusted strings or characters within PR bodies. - [SAFE]: The provided diagnostic script
scripts/git-pr.shperforms read-only operations to gather repository metadata (ahead-count, existing PR status, and keyword audits) without any dynamic execution or persistence mechanisms.
Audit Metadata