github-pr-description
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
gitandgh(GitHub CLI) to retrieve branch information, commit history, and code diffs. It is explicitly instructed to create pull requests usinggh pr createwithout prompting the user for confirmation.- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted data from the repository's git history and diffs to generate pull request descriptions. - Ingestion points: Git commit messages and code diffs are ingested via
git log origin/main..HEADandgit diff origin/main..HEADas described in the 'Analyze Changes' step. - Boundary markers: There are no delimiters or 'ignore' instructions provided to the agent to separate the analyzed code/commit data from the agent's core instructions.
- Capability inventory: The skill can write to the local file system (creating
.forge/FORGE_PR_DESCRIPTION.md) and perform authenticated network operations via theghCLI. - Sanitization: The skill does not perform any validation, escaping, or filtering on the content retrieved from the git repository before using it to generate the final PR body.
Audit Metadata