create-pr

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard version control and repository management commands to facilitate the PR process. Evidence: Uses git status, git log, git diff, gh repo view, and gh pr create to manage branches and pull requests.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads commit history and diffs to help generate PR descriptions, creating a surface for indirect injection if those sources contain malicious content. 1. Ingestion points: git log and git diff outputs are reviewed by the agent in SKILL.md. 2. Boundary markers: The skill defines a markdown structure for descriptions but lacks explicit markers to ignore embedded commands in the git data. 3. Capability inventory: Uses gh pr create, gh pr edit, and gh api to write to the repository (SKILL.md). 4. Sanitization: Content is passed as body parameters to the gh CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 02:17 PM