update-pr
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
@willbooster/agent-skillsCLI tool usingbunxand relies ongitandgh(GitHub CLI) within a Bash shell to manage repository metadata. - [EXTERNAL_DOWNLOADS]: It fetches the
@willbooster/agent-skillspackage from the npm registry at runtime via thebunxpackage runner. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes data from the repository to generate content.
- Ingestion points: The agent analyzes commit logs, file diffs, and branch information to compose the PR title and body.
- Boundary markers: No explicit delimiters are specified in the instructions to separate repository-sourced data from the agent's instructions.
- Capability inventory: The skill has access to Bash execution with git and GitHub CLI capabilities.
- Sanitization: There is no evidence of sanitization or validation of the ingested repository data before it is processed by the agent.
Audit Metadata