prepare-pr
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes Pull Request descriptions and template files which could theoretically contain instructions intended to influence agent behavior (Indirect Prompt Injection). However, the risk is low as the instructions focus on structured data entry and standard repository management tasks.
- Ingestion points: Pull Request descriptions, GitHub issue references, and
.github/pull_request_template.md. - Boundary markers: The skill uses Markdown headings (e.g.,
#### Overview,#### Details) to delineate content sections. - Capability inventory: Uses the GitHub CLI (
gh pr create) and executes repository-local scripts and tools (cargo,just,license_diff.py). - Sanitization: No specific sanitization methods are documented for the text content being placed into PR bodies.
Audit Metadata