pr-create
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses standard Git and GitHub CLI commands to manage repository state and PR creation.
- [DATA_EXFILTRATION]: Pushes code changes to the remote 'origin' repository and submits PR metadata to GitHub as part of the expected functionality.
- [PROMPT_INJECTION]: Analyzes local file changes to help generate commit messages and PR summaries, establishing an indirect prompt injection surface.
- Ingestion points: File changes in the working tree (Step 3).
- Boundary markers: None identified in the workflow instructions.
- Capability inventory: Execution of git and gh commands via subprocess.
- Sanitization: The instructions do not specify sanitization for the content processed into the PR body or commit message.
Audit Metadata