pr-ready
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external sources which could contain malicious instructions.
- Ingestion points: Pull request check logs and CI failure details fetched via the
ghCLI, as well as working tree state viagit status(SKILL.md). - Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions embedded within the fetched logs or git metadata.
- Capability inventory: The agent can perform git operations (rebase, merge, commit, push), execute shell commands via the GitHub CLI, and run local formatting, test, and build scripts.
- Sanitization: There is no mention of sanitizing or filtering the log output before the agent processes it to determine the next action.
Audit Metadata