snap-pr
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git commit messages and repository PR templates to generate pull request descriptions. Malicious content embedded in commit history or templates could attempt to influence the agent's output or behavior during the PR generation process.
- [COMMAND_EXECUTION]: The skill relies on shell-based git commands to inspect the working tree, check branch state, and push commits to the remote repository as part of the pull request workflow.
Audit Metadata