create-pull-request
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes local git commands including git status, git branch, git log, git diff, and git push to manage the pull request lifecycle.
- [PROMPT_INJECTION]: Vulnerable to indirect prompt injection through repository-sourced data.
- Ingestion points: The skill reads branch names, commit messages, diff results, and pull request templates (.github/pull_request_template.md) from the local repository and GitHub API.
- Boundary markers: Absent; no special delimiters or instructions are used to isolate or wrap external content.
- Capability inventory: The agent can publish changes via git push and interact with the GitHub API to create or modify pull requests.
- Sanitization: Absent; repository data is directly used to generate pull request titles and descriptions without validation.
Audit Metadata