splitting-pr
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes uncommitted diffs from the local repository to determine file groupings and generate commit messages or PR descriptions. Adversarial content within the diff (e.g., code comments or text in documentation) could potentially influence the agent's behavior.
- Ingestion points:
git statusand the content of the diff itself are ingested as described inSKILL.md(Metadata section) andreferences/block-cycle.md(Baseline Step). - Boundary markers: No explicit delimiters or instructions to ignore instructions embedded in the diff are specified in the provided files.
- Capability inventory: The skill performs shell commands (
git,gh) and writes to the filesystem (state file, project files) as outlined inreferences/block-cycle.md. - Sanitization: No filtering or sanitization of the processed diff content is documented in the instruction set.
- [COMMAND_EXECUTION]: The skill executes shell commands for version control and pull request management.
- Evidence:
references/block-cycle.mdincludes bash scripts for backing up branches, staging files, committing changes, and pushing to remotes. - [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub for pull request creation.
- Evidence:
references/block-cycle.md(Step 6) uses theghtool to interact withgithub.com, which is a well-known service.
Audit Metadata