pr-title-lint

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill scaffolds a GitHub Action from amannn/action-semantic-pull-request. The template pins the action to a specific commit SHA (48f256284bd46cdaab1048c3721360e808335d50), which is a security best practice for avoiding supply chain attacks.
  • [COMMAND_EXECUTION]: Uses gh api to read repository settings and grep to check for existing workflows. These commands are used for environment detection and are limited to reading repository metadata within the local context.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests repository state and file contents to determine if scaffolding is necessary. It includes boundary measures by showing diffs and requiring user confirmation before overwriting existing files, and delegates privilege-escalating tasks to specialized authorized tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 07:21 PM