create-pull-request
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local git utilities and official CLI tools (
gh,glab) to perform its functions. These operations are restricted to repository context collection and pull request creation, and they are only performed after obtaining explicit user approval, preventing unauthorized modifications.\n- [SAFE]: Data collection is limited to standard git repository artifacts (status, history, and diffs). No attempts to access sensitive files such as SSH keys, configuration secrets, or environment files were detected, and no data is exfiltrated to external third-party domains.\n- [SAFE]: The skill manages potential risks from untrusted commit messages and diff data by incorporating a 'Chain-of-Verification' (Phase 4) and a mandatory quality gate (Phase 5). This ensures the agent validates generated content against source artifacts, mitigating indirect prompt injection attempts. Furthermore, the workflow requires manual user review and approval (Phase 6) before any write operations are executed.
Audit Metadata