gitee-auto-pr
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local git commands (
git push,git fetch,git log) to manage repository workflows and interact with Gitee's review mode. - [EXTERNAL_DOWNLOADS]: Communicates with external Gitee remotes via
git fetchandgit pushto synchronize code and create pull requests. - [PROMPT_INJECTION]: Subject to potential indirect prompt injection through the processing of terminal output from git commands.
- Ingestion points: The agent is instructed to capture and report terminal output from
git pushoperations inSKILL.md. - Boundary markers: Absent; no specific delimiters are used to wrap the terminal output or instruct the agent to ignore instructions embedded in that output.
- Capability inventory: The agent can execute subprocesses via
gitcommands as defined inSKILL.md. - Sanitization: Absent; the skill does not define methods to filter or escape the captured terminal output before processing it.
Audit Metadata