send-it
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands using
gitandghto manage the development workflow, including branch creation, pushing commits, and interacting with GitHub pull requests. - [EXTERNAL_DOWNLOADS]: During worktree setup and lockfile reconciliation, the skill may invoke
pnpm installto ensure that necessary dependencies are available in the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as git commit messages and branch names to automatically generate PR titles and changelog content.
- Ingestion points: Commit messages are retrieved via
git logand branch names viagit branch, which are then parsed by thederive-bump.mjsscript for processing by the agent. - Boundary markers: The skill does not explicitly use delimiters or specialized instructions to prevent the agent from potentially following instructions that might be embedded within commit messages or PR metadata.
- Capability inventory: The agent has access to file system tools (
Write,Read,Edit) and shell execution capabilities for developer tools (Bash(git:*),Bash(gh:*),Bash(pnpm:*)). - Sanitization: While the
derive-bump.mjshelper script parses the commit structure according to Conventional Commits standards, it does not sanitize the text content for secondary instructions before the agent processes it for PR generation.
Audit Metadata