create-pr

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Git and GitHub CLI (gh) commands to manage branches, commits, and pull requests. It also attempts to discover and run local repository scripts like npm test or npm run lint to verify changes before submission.
  • [EXTERNAL_DOWNLOADS]: If a sibling auto-commit skill is not found locally, the skill is instructed to fetch it from github.com/anthropics/skills. This falls under the [TRUST-SCOPE-RULE] as it targets a well-known, trusted organization and is documented neutrally.
  • [REMOTE_CODE_EXECUTION]: While it runs local tests and git commands, it does not pipe remote content to a shell or execute untrusted code from the network.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:50 PM