pr-writing
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local shell script
bash scripts/pr-lint.shto validate the formatting and content of commit messages against the provided rules. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of
git diffoutput. * Ingestion points:git diff main...HEAD --statand code hunks (SKILL.md). * Boundary markers: Absent. * Capability inventory: Execution ofbash scripts/pr-lint.sh(SKILL.md). * Sanitization: Absent. The vulnerability surface is inherent to the skill's primary function of summarizing code changes.
Audit Metadata