create-pr
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes standard command-line utilities such as
gitand the GitHub CLI (gh) to perform repository management tasks. These are appropriate tools for the skill's stated purpose. - [SAFE]: Data ingestion is limited to local repository metadata (branch names, commit logs, and file diffs). While these are technically untrusted inputs that could contain indirect prompt injection attempts, the skill uses them strictly for string formatting and narrative generation rather than execution.
- [SAFE]: The skill references legitimate external services, specifically GitHub for PR creation and Linear for project management linking, which are standard for the targeted 'prisma-next' development environment.
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were detected. The use of
git rebase --signoffis a best practice for Developer Certificate of Origin (DCO) compliance.
Audit Metadata