issue-branch-pr-flow

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides a URL to fetch a markdown configuration file (SKILL.md) from the author's own GitHub repository (philtzjp/skills). This is a legitimate method for updating skill definitions.
  • [COMMAND_EXECUTION]: The skill includes a command using pnpm dlx to execute a tool for adding new skills from the author's repository. This is intended for administrative setup and migration to the newer github skill version.
  • [INDIRECT_PROMPT_INJECTION]: The skill mentions fetching external content from GitHub. While this is an ingestion point for external data, it targets a specific, vendor-owned configuration file, posing minimal risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:13 PM