pull-request
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute git and gh (GitHub CLI) commands to interact with the repository and the GitHub API. This is the primary function of the skill for gathering metadata and performing PR actions.
- [PROMPT_INJECTION]: The skill processes external, untrusted content from the repository which poses a risk of indirect prompt injection.
- Ingestion points: Commit messages (git log), repository diffs (git diff), pull request templates (.github/pull_request_template.md), and the .tituskirch-skills.json configuration file.
- Boundary markers: A mandatory 'PR plan' is displayed for the user to review and confirm before the PR is created or updated.
- Capability inventory: The skill has access to shell execution via Bash (used for git and gh CLI tools) and file system access via Read, Grep, and Glob.
- Sanitization: The skill implements a security check that scans for sensitive data (e.g., .env files, API keys, tokens) in the content being gathered and warns the user if detected.
Audit Metadata