git-pr-create
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local
gitandghcommands to manage branch status, view repository metadata, and create pull requests. These are standard operations for the skill's stated purpose. - [PROMPT_INJECTION]: The skill retrieves commit subjects and messages via
git logto automatically generate titles and descriptions for pull requests. This constitutes an indirect prompt injection surface as the agent processes untrusted data from the repository's history. However, the risk is limited to the content of the generated PR and is inherent to the tool's primary function of summarizing development changes. - Ingestion points:
SKILL.md(viagit logcommands) - Boundary markers: None specified for the
$TITLEand$BODYvariable interpolations - Capability inventory: Local command execution via
gitandghCLI tools - Sanitization: No sanitization of commit history metadata is shown before use in PR generation.
Audit Metadata