pull-request-standards
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data sources such as pull request diffs, issue descriptions, conversation contexts, and task notes. These sources could potentially contain malicious instructions intended to manipulate the agent's output. However, the risk is minimal as the skill's primary function is to generate text for a PR description, and it does not possess capabilities to execute commands or perform network operations based on that input.
- [COMMAND_EXECUTION]: The skill's documentation and templates include example shell commands (e.g.,
pnpm install && pnpm build:pkgs,pnpm dev:next) within the 'How to Test' section. These are provided as static examples of what a contributor should include in a PR description for human reviewers to follow; the skill does not attempt to execute these commands automatically.
Audit Metadata