commit-push-pr
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard
gitcommands (includingstatus,diff,log,branch,rev-parse,fetch,checkout,stash, andpush) and GitHub CLI commands (gh pr list,gh pr view,gh pr create,gh pr edit) to perform its primary function of managing repository state and pull requests. - [DYNAMIC_CONTEXT_INJECTION]: Employs the
!commandsyntax inSKILL.mdto dynamically fetch the repository's default branch and check for existing pull requests at the time the skill is loaded. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository to generate PR descriptions, creating an indirect prompt injection surface.
- Ingestion points: The skill reads output from
git diffandgit logto provide context for the description generation logic. - Capability inventory: The skill has the ability to execute shell commands (
git,gh) and write to temporary files for PR body management. - Boundary markers: No explicit delimiters or guardrails are defined for the interpolation of diff content into the agent's prompt.
- Sanitization: The instructions provide a logical filter by asking the agent to interpret the purpose of the changes rather than repeating the diff verbatim.
- [EXTERNAL_DOWNLOADS]: Includes a branding badge hosted on
img.shields.ioand a reference to the project's repository ongithub.com/raptoravis/tunan. These are well-known services and vendor-related resources. - [SAFE]: The skill implements protective measures by explicitly warning the agent against using
git add .orgit add -Ato prevent the accidental inclusion of sensitive files like.env, build artifacts, or generated files in commits.
Audit Metadata