pr-description
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository's git history and external project management tools.\n
- Ingestion points: The skill fetches data from
git log(commit messages),git diff, and external sources such as Jira tickets and PRDs in SKILL.md.\n - Boundary markers: The instructions do not specify any boundary markers or delimiters to isolate untrusted data from the skill's logic, nor do they instruct the agent to ignore embedded commands.\n
- Capability inventory: The skill possesses the capability to execute shell commands for version control (
git push) and PR creation (gh pr create), and it can post data to external Jira tickets.\n - Sanitization: No sanitization or validation of the ingested text is performed before it is used to generate the PR title, body, or as input for shell commands.
Audit Metadata