skills/microsoft/aspire/create-pr/Gen Agent Trust Hub

create-pr

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Shell Command Execution]: The skill uses the gh CLI and git to perform repository operations, such as pushing branches and creating pull requests. This is standard functionality for a developer-focused tool, but it requires that the environment has these tools installed and authenticated.
  • [Artifact Sanitization Guidance]: A notable security feature in the procedure is the explicit instruction to inspect all visual artifacts (screenshots/recordings) for credentials, secrets, or confidential data before uploading them to GitHub. This reflects a security-conscious approach to data handling.
  • [Security Consideration Reporting]: The skill instructs the agent to identify and document security-relevant changes (e.g., new network listeners, path construction, or secret handling) in the PR body if they are present in the code changes. This facilitates human security review of the code being submitted.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:22 PM