update-pr
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from commit history and code diffs. 1. Ingestion points: git log and git diff outputs (SKILL.md steps 2 and 5). 2. Boundary markers: The PR body is enclosed in a quoted heredoc (<<'EOF') in the update command. 3. Capability inventory: Access to git and gh CLI tools for repository and PR modification. 4. Sanitization: The use of quoted heredoc delimiters prevents shell expansion or execution of characters (like backticks or dollar signs) that might be present in the processed git data.
- [COMMAND_EXECUTION]: The skill executes standard development commands (git log, git diff, gh pr view, gh pr edit). These are appropriate for the skill's stated purpose and interact with the well-known GitHub service.
Audit Metadata