pr-create
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes Git and the GitHub CLI (
gh) through Python scripts using thesubprocessmodule. These commands are executed in a list format, which is a secure practice to prevent shell injection. The operations include pushing branches, viewing pull request status, and creating new pull requests. - [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the user's repository, including commit messages and code diffs, to generate PR descriptions. This introduces a surface where malicious repository content could influence the agent's output. \n
- Ingestion points:
scripts/gather_context.pyreadsgit logandgit diffoutput. \n - Boundary markers: None explicitly present. \n
- Capability inventory:
scripts/create_pr.pyperformsgh pr create. \n - Sanitization: None.
Audit Metadata