pre-pr
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the GitHub CLI (
gh), Git, and Python tools (uv,ruff,basedpyright). These are standard tools for managing development workflows and running local tests within the project's repository context. - [PROMPT_INJECTION]: The skill processes content from external sources (GitHub issues and code diffs), which constitutes an indirect prompt injection surface.
- Ingestion points: Data enters the context through
gh issue viewandgit diffoutputs. - Boundary markers: The skill does not define explicit delimiters or instructions to prevent the agent from obeying instructions embedded in the ingested data.
- Capability inventory: The agent has capabilities for shell command execution, which could be abused if malicious content is processed from an issue.
- Sanitization: There is no defined sanitization or filtering logic for external content before it is incorporated into the pull request description template.
Audit Metadata