create-pr
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION] (LOW): Found an indirect prompt injection surface where git log data is used to generate PR content without sanitization. (1) Ingestion points: Git log (SKILL.md); (2) Boundary markers: Absent; (3) Capability inventory: Command execution via GitHub CLI; (4) Sanitization: Absent.
- [NO_CODE] (SAFE): This skill contains no script files or binary executables, only instructions.
Audit Metadata