pr-description
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate repository management tasks consistent with its stated purpose and the author's identity.
- [COMMAND_EXECUTION]: The skill uses standard tools like
git log,git diff, andghto interact with the codebase and GitHub API. - [PROMPT_INJECTION]: The skill processes repository data (logs and diffs) which is an untrusted ingestion point. 1. Ingestion points:
git logandgit diffoutputs (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Executes shell commands viagitandgh(SKILL.md). 4. Sanitization: No sanitization of the processed git output is performed.
Audit Metadata