pr-to-develop
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes git and the GitHub CLI (gh) to perform repository operations such as checking branch status, reading logs, and creating pull requests. These are standard developer tools used according to the skill's stated purpose.
- [PROMPT_INJECTION]: The skill processes untrusted data from commit messages and code diffs to generate summaries. This indirect prompt injection surface is addressed by the use of a quoted heredoc (<<'EOF') in the pull request creation command, which prevents the shell from executing injected content, and by a mandatory user review step in the instructions.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill facilitates a common developer workflow using established tools and secure string handling.
Audit Metadata