land
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to automatically detect and run commands found within project files such as
package.json,Makefile, andpyproject.toml. This allows the agent to execute shell commands based on the contents of the local repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local environment which could potentially be used to influence the agent's behavior.
- Ingestion points: The agent reads project configuration files and the output of
git diffto determine its next steps and generate PR content. - Boundary markers: Absent; there are no specific instructions to use delimiters or ignore embedded instructions when reading these files.
- Capability inventory: The skill uses
gitfor version control,ghfor remote PR management, and general shell execution for running discovered test scripts. - Sanitization: Absent; the instructions do not require validation or filtering of the data read from the repository before it is used to generate command-line arguments or PR descriptions.
Audit Metadata