quick-pr
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard tools including git and the GitHub CLI (gh) to manage worktrees, commit changes, and open pull requests. All commands are aligned with the skill's stated purpose.
- [PROMPT_INJECTION]: The skill processes data from the local repository (git diffs, commit history, PR templates) to generate branch names, commit messages, and PR bodies. While this constitutes an indirect prompt injection surface, the skill implements strong mitigations by requiring the user to review and confirm all generated text and proposed actions at each step of the process.
Audit Metadata