pr
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is entirely descriptive, providing Markdown templates and visual examples (Mermaid diagrams, file trees) to help users write Pull Request summaries. It does not include any scripts, binaries, or automated tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided context (code changes and domain language) to populate the PR template. However, there is no threat as the skill has no functional capabilities like network access or command execution that could be misused.
- [EXTERNAL_DOWNLOADS]: The skill references external URLs in its metadata and CREDITS.md for attribution purposes. These links point to public GitHub repositories and do not involve runtime downloads or code execution.
Audit Metadata