checkout-commit-push-pr
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill's operations are strictly limited to standard development workflows using Git and the GitHub CLI.
- [DATA_EXPOSURE]: The skill provides robust instructions for preventing data exposure. It specifically lists sensitive file patterns (e.g., .env*, credentials*, *.key) that must not be staged, and requires the agent to read and flag untracked files for human review if they appear questionable.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository data, creating a surface for indirect prompt injection. This is mitigated by instructions to stop and flag ambiguous data for human intervention.
- Ingestion points: Reads repository file contents,
git diffoutput,.github/pull_request_template.md, and CI/CD logs viagh run view(SKILL.md). - Boundary markers: Absent.
- Capability inventory: Ability to modify repository state via
git commit,git push, andgh pr create(SKILL.md). - Sanitization: No explicit sanitization of interpolated data into commit messages or PR bodies.
Audit Metadata