pr-description-writer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local commands to function, including
git diff,git log, andgh pr. These commands are used to extract repository information and interact with GitHub's API. The usage is strictly scoped to the repository's context and the user's existing GitHub authentication, which is required for the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data from external sources and has the capability to write output back to a remote service.
- Ingestion points: Data is read from the local repository using
git diffandgit log, as well as from existing pull requests usinggh pr viewinSKILL.md. - Boundary markers: The skill does not explicitly instruct the agent to ignore instructions that might be embedded within the code diffs or commit messages being processed.
- Capability inventory: The skill has the ability to write to GitHub by creating or editing pull requests using
gh pr createandgh pr editinSKILL.md. - Sanitization: The skill utilizes shell heredocs with quoted delimiters (
<< 'EOF') when passing generated text to the GitHub CLI, which effectively prevents the generated content from being interpreted as shell commands.
Audit Metadata