pr-craft
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates standard development workflows using established tools such as git and the GitHub CLI (gh).
- [SAFE]: The instructions emphasize explicit file staging (e.g., git add ) rather than blanket additions (git add .), which serves as a safeguard against accidentally committing sensitive local configuration or environment files.
- [SAFE]: The documentation includes security-conscious shell command construction, specifically recommending the use of quoted heredocs (<<'EOF') to ensure the shell does not expand variables or backticks inside the generated PR descriptions or commit messages.
- [SAFE]: All metadata, homepage links, and repository references are consistent with the stated purpose and the author's public profile.
Audit Metadata