create-pr
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform shell operations such asgit add,git commit,git push, andgh pr createas part of its core functionality of managing pull requests.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads and interprets content fromgit status,git diff, andgit log. This behavior exposes the agent to indirect prompt injection if the codebase or commit history contains malicious instructions designed to alter the pull request generation process.
Audit Metadata