create-pr
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Shell Command Execution]: The skill uses the
ghCLI andgitto perform repository operations, such as pushing branches and creating pull requests. This is standard functionality for a developer-focused tool, but it requires that the environment has these tools installed and authenticated. - [Artifact Sanitization Guidance]: A notable security feature in the procedure is the explicit instruction to inspect all visual artifacts (screenshots/recordings) for credentials, secrets, or confidential data before uploading them to GitHub. This reflects a security-conscious approach to data handling.
- [Security Consideration Reporting]: The skill instructs the agent to identify and document security-relevant changes (e.g., new network listeners, path construction, or secret handling) in the PR body if they are present in the code changes. This facilitates human security review of the code being submitted.
Audit Metadata