to-pr
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line tools to manage repository state and pull requests.\n
- Evidence:
SKILL.mdincludes instructions to rungh pr view,gh pr edit,git status,git commit, andgit push.\n - Evidence: A shell pipeline involving
printfandshasumis used in Step 6 to calculate URL fragments for diff links.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, which could contain malicious instructions designed to influence the agent's actions.\n - Ingestion points: Step 3 of
SKILL.mddirects the agent to read ticket artifacts and the complete diff of the pull request.\n - Boundary markers: The instructions do not specify any delimiters or safety prompts to distinguish between data and instructions within these external sources.\n
- Capability inventory: The skill enables the agent to perform write operations like
git commit,git push, andgh pr edit.\n - Sanitization: No sanitization process is defined for the content extracted from tickets or code diffs.
Audit Metadata