pull-request
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill leverages standard developer utilities (
git,gh) to perform routine code and pull request management tasks. It advocates for security best practices, such as treating security and privacy findings from CI as blocking issues. - [COMMAND_EXECUTION]: The skill utilizes command-line tools including
git,gh(GitHub CLI), and the vendor-specificwendyCLI (e.g.,wendy deploy) to interact with the repository and deployment pipelines. - [INDIRECT_PROMPT_INJECTION]: The skill has a functional requirement to ingest and process data from external and potentially untrusted sources, including issue titles from trackers (e.g., Linear), PR comments, human reviews, and CI feedback.
- Ingestion points: Processes content from external issue links, GitHub PR descriptions, comments, and automated review findings as outlined in
SKILL.mdandreferences/descriptions.md. - Boundary markers: No specific delimiters or instructions to ignore adversarial content within these inputs are defined.
- Capability inventory: The skill uses
gh pr createandgh pr editto modify pull request content based on gathered information. - Sanitization: No explicit sanitization or validation protocols for the external text are described in the instructions.
Audit Metadata