create-pr

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform shell operations such as git add, git commit, git push, and gh pr create as part of its core functionality of managing pull requests.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads and interprets content from git status, git diff, and git log. This behavior exposes the agent to indirect prompt injection if the codebase or commit history contains malicious instructions designed to alter the pull request generation process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 07:21 AM
Security Audit — agent-trust-hub — create-pr