agent-pr-creator
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git and GitHub CLI (gh) commands to retrieve repository status, commit history, and create pull requests. These operations are essential to the skill's primary function and utilize well-known, official tools.
- [PROMPT_INJECTION]: The skill processes untrusted data from git commit messages and code diffs, which represents an indirect prompt injection surface.
- Ingestion points: Git commit logs and code differences retrieved via
git logandgit diff. - Boundary markers: Absent; the instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the git data.
- Capability inventory: Execution of subprocess commands using
gitandgh. - Sanitization: No explicit sanitization or filtering of the commit content is performed before it is analyzed by the agent.
Audit Metadata