ship-pr
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository history and diffs to determine its output and actions. 1. Ingestion points:
git log,git status, andgit diffcommands in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory:git push,gh pr create, andgh pr mergein SKILL.md. 4. Sanitization: Absent. - [COMMAND_EXECUTION]: The skill executes version control commands via
gitand GitHub CLI commands viaghto perform branch management and repository updates.
Audit Metadata