gh-pr-metadata
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub Pull Request titles and bodies. However, its primary function is to normalize and summarize this data into a structured template, minimizing the risk of executing embedded instructions. Sanitization is partially handled by the validation script which enforces formatting rules.
- [COMMAND_EXECUTION]: Employs standard GitHub (
gh) and Git commands to manage Pull Request metadata and branch state. These operations are aligned with the skill's stated purpose of PR maintenance. - [DYNAMIC_EXECUTION]: The
validate_pr_metadata.pyscript usessubprocess.runto interact with the GitHub CLI. This is implemented safely using argument lists rather than shell strings, effectively preventing command injection from untrusted inputs.
Audit Metadata