pr-ready
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitand the GitHub CLI (gh) to perform repository management tasks such as status checks, merging, rebasing, and log inspection. These are standard operations for the stated purpose of PR maintenance. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external content from CI logs and source code during conflict resolution, which could contain malicious instructions.
- Ingestion points: Pull request CI logs retrieved via
ghand source code files during merge/rebase (SKILL.md). - Boundary markers: No specific delimiters are used to wrap external content.
- Capability inventory: Local file modification,
git commit, andgit pushcapabilities. - Sanitization: The skill mitigates risks by explicitly requiring user confirmation before pushing any resolved conflicts or fixes to the remote repository.
Audit Metadata