create-pr
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard version control and repository management commands to facilitate the PR process. Evidence: Uses
git status,git log,git diff,gh repo view, andgh pr createto manage branches and pull requests. - [INDIRECT_PROMPT_INJECTION]: The skill reads commit history and diffs to help generate PR descriptions, creating a surface for indirect injection if those sources contain malicious content. 1. Ingestion points:
git logandgit diffoutputs are reviewed by the agent in SKILL.md. 2. Boundary markers: The skill defines a markdown structure for descriptions but lacks explicit markers to ignore embedded commands in the git data. 3. Capability inventory: Usesgh pr create,gh pr edit, andgh apito write to the repository (SKILL.md). 4. Sanitization: Content is passed as body parameters to theghCLI tool.
Audit Metadata