nemoclaw-contributor-create-pr
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several local command-line tools to manage the development lifecycle.
- Uses
gitfor branch verification, commit history analysis, configuration retrieval, and pushing code. - Uses
npm testandmake docsto ensure code and documentation quality before submission. - Uses the
gh(GitHub) CLI to create the pull request on the remote repository. - [EXTERNAL_DOWNLOADS]: Fetches and executes the
prekutility vianpxduring the pre-PR check phase. - The use of
npx prekdownloads the package from the npm registry to perform project-specific validations. - [REMOTE_CODE_EXECUTION]: Executes code at runtime via the
npxcommand, which is a standard practice for project-specific development tooling. - [DATA_EXFILTRATION]: Retrieves local git identity information (
user.nameanduser.email) usinggit config. - This data is utilized solely to provide the mandatory DCO sign-off required for contributions to the NemoClaw project.
- [PROMPT_INJECTION]: The skill ingests untrusted data from git diffs and commit messages to generate pull request summaries.
- To mitigate potential command injection during the
gh pr createstep, the skill specifies the use of a quoted heredoc ('EOF'), which prevents shell expansion of variables or command substitutions within the PR body.
Audit Metadata