gh-ship

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git and gh CLI tools to perform repository operations such as staging changes, committing, and opening pull requests.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it incorporates external data from source code diffs and user arguments into its logic.
  • Ingestion points: The skill reads data from git status, git diff, and $ARGUMENTS.
  • Boundary markers: No delimiters or safety instructions are used to distinguish between repo data and system instructions.
  • Capability inventory: The skill can execute commands to modify the repository and create PRs.
  • Sanitization: Input data is not sanitized or escaped before being processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 03:04 PM