pr
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several command-line interfaces for its core functionality:
- Git/GitHub CLI: Uses
gitfor branch management and pushing, andghfor creating, viewing, and editing pull requests. - Bun: Executes
bun run build,bun run stylecheck, andbunx oxfmtto format code and verify the build status. - Vercel CLI: Conditionally uses
vercel inspectto resolve deployment URLs if the CLI is authenticated. - [INDIRECT_PROMPT_INJECTION]: The skill implements a mechanism to poll and parse external data (GitHub PR comments) to extract Vercel preview links.
- Ingestion points: Polls PR comments for a specific Vercel project row to retrieve deployment links.
- Boundary markers: No specific delimiters are used for the parsed text, but the skill scope is limited to appending links to a specific section.
- Capability inventory: Includes the ability to execute shell commands (
gh,git,bun,vercel), write to the system temporary directory, and modify PR metadata. - Sanitization: The skill follows a critical security best practice by writing the parsed/updated PR body to a temporary Markdown file and using the
--body-fileflag, which effectively prevents command injection that could occur if the data were passed as an inline shell argument.
Audit Metadata