create-pr
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git and GitHub CLI (
gh) commands to manage branches, commits, and pull requests. It also attempts to discover and run local repository scripts likenpm testornpm run lintto verify changes before submission. - [EXTERNAL_DOWNLOADS]: If a sibling
auto-commitskill is not found locally, the skill is instructed to fetch it fromgithub.com/anthropics/skills. This falls under the [TRUST-SCOPE-RULE] as it targets a well-known, trusted organization and is documented neutrally. - [REMOTE_CODE_EXECUTION]: While it runs local tests and git commands, it does not pipe remote content to a shell or execute untrusted code from the network.
Audit Metadata