issue-branch-pr-flow
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a URL to fetch a markdown configuration file (
SKILL.md) from the author's own GitHub repository (philtzjp/skills). This is a legitimate method for updating skill definitions. - [COMMAND_EXECUTION]: The skill includes a command using
pnpm dlxto execute a tool for adding new skills from the author's repository. This is intended for administrative setup and migration to the newergithubskill version. - [INDIRECT_PROMPT_INJECTION]: The skill mentions fetching external content from GitHub. While this is an ingestion point for external data, it targets a specific, vendor-owned configuration file, posing minimal risk in this context.
Audit Metadata