pr-creation
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external data from verification reports and test results into pull request descriptions. This represents a standard surface for indirect prompt injection common in automated documentation tools.
- [COMMAND_EXECUTION]: The skill employs standard GitHub CLI (gh) and git commands to automate the pull request lifecycle. These actions are aligned with the skill's stated purpose and use legitimate developer tooling.
Audit Metadata