split-to-prs
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage repository state, specifically utilizing
git stash createandgit update-refto create recoverable snapshots of work before reorganization. These are standard Git operations for state management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from repository configuration files including
CODEOWNERSandPRODUCTOWNERSto identify reviewer boundaries. - Ingestion points:
CODEOWNERS,PRODUCTOWNERS, and Git diff output analyzed inSKILL.mdsection 1. - Boundary markers: None explicitly mentioned for separating file content from instructions.
- Capability inventory: Git branch management, committing, and opening pull requests via CLI tools.
- Sanitization: The skill does not explicitly sanitize these files, but uses them for their intended purpose of metadata extraction.
Audit Metadata