snap-pr
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill performs standard git operations to manage the repository state. This includes checking the current branch, comparing diffs between the base and HEAD, and pushing commits to the remote repository. These actions are necessary for the skill's primary function of PR management.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection (Category 8) because it processes untrusted data from git diffs and repository-specific templates to generate the PR summary and description.
- Ingestion points: Ingests data from
git diff base...HEAD, local git commit history, and the repository's PR template files. - Boundary markers: The instructions do not specify the use of delimiters or specific markers to isolate the untrusted diff content from the generation prompt.
- Capability inventory: The agent has the capability to write to the repository by creating or updating pull requests and pushing local commits.
- Sanitization: There is no explicit sanitization or filtering logic mentioned for the content retrieved from git diffs or external templates.
Audit Metadata