create-issues-update-pr
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository history and pull request content, creating a surface for indirect prompt injection.
- Ingestion points: The workflow involves reading PR titles, bodies, and git commit logs/diffs using
pull_request_readand local git commands in SKILL.md. - Boundary markers: No specific boundary markers or instructions to treat external data as non-executable text are provided in SKILL.md.
- Capability inventory: The skill uses
issue_write,sub_issue_write, andupdate_pull_requestto modify the target repository. - Sanitization: The instructions in SKILL.md do not specify any sanitization or validation of the content gathered from the repository before it is used to create or update GitHub objects.
Audit Metadata