gh-enrich-pr-description
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
gitandgh(GitHub CLI) commands to analyze branch changes, retrieve commit history, and manage pull requests. These are standard operations for repository management tasks. - [DATA_EXFILTRATION]: The skill accesses commit metadata, including author names and email addresses, via
git logcommands. This data is used locally within the agent session to identify contributors for CC mentions in the PR description and is not transmitted to unauthorized external domains. - [PROMPT_INJECTION]: The skill processes data from external sources, such as commit messages and existing pull request descriptions, creating a surface for indirect prompt injection.
- Ingestion points: Commit messages retrieved via
git logand PR metadata retrieved viagh pr viewin SKILL.md. - Boundary markers: Absent; the workflow does not implement specific delimiters or instructions to ignore embedded instructions in the ingested data.
- Capability inventory: The skill can read repository history via
gitand update PR content viagh pr edit. - Sanitization: Absent; the skill provides the raw metadata to the agent for synthesis into the final description without explicit filtering or escaping.
Audit Metadata