skills/simonwong/skills/ship-pr/Gen Agent Trust Hub

ship-pr

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository history and diffs to determine its output and actions. 1. Ingestion points: git log, git status, and git diff commands in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: git push, gh pr create, and gh pr merge in SKILL.md. 4. Sanitization: Absent.
  • [COMMAND_EXECUTION]: The skill executes version control commands via git and GitHub CLI commands via gh to perform branch management and repository updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 12:30 PM
Security Audit — agent-trust-hub — ship-pr