gh-update-pr
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill ingests PR data via 'gh pr view' and uses it to perform updates via 'gh api', creating a potential injection surface. 1. Ingestion points: 'gh pr view' output. 2. Boundary markers: Absent. 3. Capability inventory: 'gh api' (PATCH) for PR modification. 4. Sanitization: Absent.
- Command Execution (SAFE): Uses standard GitHub CLI commands ('gh api', 'gh pr view') to perform repository management tasks on a trusted domain.
Audit Metadata