pr-update
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line interfaces such as
git,gh, andglabfor repository management and pull request operations.\n- [COMMAND_EXECUTION]: An external utility namedno-tropesis invoked to process generated text before submission. This tool is not a standard system utility.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted pull request descriptions retrieved from external servers.\n - Ingestion points: Existing PR/MR bodies retrieved via
gh pr viewandglab mr viewinSKILL.md.\n - Boundary markers: None present to isolate untrusted PR content from instructions.\n
- Capability inventory: Full
gitoperations (reset, commit, force-push) and PR lifecycle management viagh/glab.\n - Sanitization: No explicit programmatic sanitization or delimiters are defined for the ingested content.
Audit Metadata