github-pr-submit
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes GitHub CLI (gh) and Git commands to manage pull requests, including 'gh pr create', 'gh pr edit', and 'git push'. These operations are standard for the development workflow described.
- [PROMPT_INJECTION]: The skill uses content from '.github/PULL_REQUEST_TEMPLATE.md' to populate PR descriptions, which is an indirect prompt injection surface if the repository template contains malicious instructions.
- Ingestion points: .github/PULL_REQUEST_TEMPLATE.md (referenced in SKILL.md)
- Boundary markers: Absent
- Capability inventory: GitHub CLI (gh) and Git subprocess execution
- Sanitization: Absent
Audit Metadata