pr-readiness-check
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git diffcommands to retrieve file names and content changes from the current branch. This is the intended functionality for a PR readiness tool and does not involve arbitrary command execution or shell injection risks as the commands are static. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of branch diffs, which could contain malicious instructions embedded in code comments or strings intended to influence the agent's analysis.
- Ingestion points: The
git diffoutput is processed by the agent as instructed inrepos/metamask-mobile.mdto identify guideline violations. - Boundary markers: None identified; the skill processes the diff content directly.
- Capability inventory: The skill has no capabilities to write files, access the network, or execute arbitrary subprocesses beyond the predefined
gitcommands. - Sanitization: No explicit sanitization or filtering of the diff content is performed before analysis.
Audit Metadata