mcore-split-pr
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
gh(GitHub CLI) andgitto analyze PRs and manage branches. These operations are scoped to theNVIDIA/Megatron-LMrepository and user forks, minimizing the risk of unauthorized access or broader system impact. - [PROMPT_INJECTION]: The skill processes external, untrusted content from GitHub pull requests (titles and bodies) which presents a surface for indirect prompt injection. However, the risk is mitigated by the workflow's requirement for human review and the lack of high-risk capabilities like sensitive file access or direct network exfiltration.
- Ingestion points: Data retrieved from
gh pr viewandgh pr diffinSKILL.md. - Boundary markers: None explicitly defined to isolate PR content from instructions.
- Capability inventory: PR creation, git branch management, and file modification through standard CLI tools.
- Sanitization: No automated sanitization of pull request text is implemented; the agent relies on its internal safety filters and user oversight.
Audit Metadata