pr-title-lint
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill scaffolds a GitHub Action from
amannn/action-semantic-pull-request. The template pins the action to a specific commit SHA (48f256284bd46cdaab1048c3721360e808335d50), which is a security best practice for avoiding supply chain attacks. - [COMMAND_EXECUTION]: Uses
gh apito read repository settings andgrepto check for existing workflows. These commands are used for environment detection and are limited to reading repository metadata within the local context. - [INDIRECT_PROMPT_INJECTION]: The skill ingests repository state and file contents to determine if scaffolding is necessary. It includes boundary measures by showing diffs and requiring user confirmation before overwriting existing files, and delegates privilege-escalating tasks to specialized authorized tools.
Audit Metadata