skills/raine/workmux/open-pr/Gen Agent Trust Hub

open-pr

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Employs standard developer utilities git and gh to manage the PR workflow. The gh pr create --web command is used to ensure the final result is reviewed by the user in a browser prior to submission.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted commit messages and file diffs. 1. Ingestion points: outputs of git diff and git log commands. 2. Boundary markers: uses a hardcoded markdown template to structure the description. 3. Capability inventory: accesses branch operations and PR creation via the Bash tool. 4. Sanitization: relies on the user to review the final description in the web browser before the pull request is created.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 06:25 AM
Security Audit — agent-trust-hub — open-pr