create-pr
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes git and the GitHub CLI (gh) to perform repository operations such as viewing status, logs, and diffs, as well as creating and updating pull requests. These are standard operations for its intended purpose.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it processes untrusted data (code diffs and commit messages) to generate pull request descriptions. 1. Ingestion points: git log and git diff outputs. 2. Boundary markers: None present. 3. Capability inventory: Creating and patching pull requests via gh CLI and GitHub API. 4. Sanitization: No explicit sanitization of the input data is performed.
Audit Metadata