why
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) to search for and list pull requests. This is a functional requirement for its stated purpose of correlating code changes with historical PR data. Asghis a well-known and official tool, its usage for this specific task is considered safe. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including coding session excerpts and pull request metadata. While this introduces a theoretical surface for indirect prompt injection, the skill's capabilities are focused on information retrieval and synthesis with no high-risk operations detected.
- Ingestion points: Coding session excerpts from
why_did_this_changeand pull request metadata fromghCLI commands. - Boundary markers: None explicitly provided in the instructions.
- Capability inventory: Uses
ghCLI for read-only repository data retrieval and accesses internal session message tools. - Sanitization: None specified; the agent is instructed to synthesize summaries from the retrieved text evidence.
Audit Metadata