open-pr
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs standard developer utilities
gitandghto manage the PR workflow. Thegh pr create --webcommand is used to ensure the final result is reviewed by the user in a browser prior to submission. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted commit messages and file diffs. 1. Ingestion points: outputs of
git diffandgit logcommands. 2. Boundary markers: uses a hardcoded markdown template to structure the description. 3. Capability inventory: accesses branch operations and PR creation via the Bash tool. 4. Sanitization: relies on the user to review the final description in the web browser before the pull request is created.
Audit Metadata