fetch-pr
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the @willbooster/agent-skills package from the NPM registry via bunx. This is a vendor-owned resource.
- [COMMAND_EXECUTION]: The skill executes shell commands through bun and the GitHub CLI (gh) to fetch pull request information.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from GitHub pull requests.
- Ingestion points: Pull request bodies and messages fetched via the fetch-pr command.
- Boundary markers: No delimitation or instructions to ignore embedded commands are present in the provided instructions.
- Capability inventory: The agent has access to bash shell execution restricted to bun and gh tools.
- Sanitization: There is no evidence of sanitization or filtering of the fetched external data before it enters the agent context.
Audit Metadata