create-pull-request

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes local git commands including git status, git branch, git log, git diff, and git push to manage the pull request lifecycle.
  • [PROMPT_INJECTION]: Vulnerable to indirect prompt injection through repository-sourced data.
  • Ingestion points: The skill reads branch names, commit messages, diff results, and pull request templates (.github/pull_request_template.md) from the local repository and GitHub API.
  • Boundary markers: Absent; no special delimiters or instructions are used to isolate or wrap external content.
  • Capability inventory: The agent can publish changes via git push and interact with the GitHub API to create or modify pull requests.
  • Sanitization: Absent; repository data is directly used to generate pull request titles and descriptions without validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 05:12 PM
Security Audit — agent-trust-hub — create-pull-request