pr-description-writer

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several local commands to function, including git diff, git log, and gh pr. These commands are used to extract repository information and interact with GitHub's API. The usage is strictly scoped to the repository's context and the user's existing GitHub authentication, which is required for the skill's primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data from external sources and has the capability to write output back to a remote service.
  • Ingestion points: Data is read from the local repository using git diff and git log, as well as from existing pull requests using gh pr view in SKILL.md.
  • Boundary markers: The skill does not explicitly instruct the agent to ignore instructions that might be embedded within the code diffs or commit messages being processed.
  • Capability inventory: The skill has the ability to write to GitHub by creating or editing pull requests using gh pr create and gh pr edit in SKILL.md.
  • Sanitization: The skill utilizes shell heredocs with quoted delimiters (<< 'EOF') when passing generated text to the GitHub CLI, which effectively prevents the generated content from being interpreted as shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 02:06 PM