pr-description
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is formatting markdown for Pull Requests using standard GitHub CLI tools. No malicious intent, obfuscation, or unauthorized data exfiltration patterns were detected.
- [PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection by processing external data from Pull Request descriptions.
- Ingestion points: Pull Request body content is retrieved via
gh pr viewas described in the 'Applying it' section ofSKILL.md. - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions within the ingested PR body.
- Capability inventory: The agent can write to the local file system (
/tmp/pr-body.md) and modify Pull Requests usinggh pr createandgh pr editcommands. - Sanitization: No specific sanitization or filtering logic is provided for the content read from existing PR bodies.
Audit Metadata