create-pr

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute routine version control operations, including git status, git diff, git push, and gh pr create. These tools are used as intended to facilitate the pull request workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads context from the repository, such as diffs and commit history, which constitutes a potential surface for indirect prompt injection if the repository contains malicious content. 1. Ingestion points: git diff output, commit logs, and the ${ARGUMENTS} input. 2. Boundary markers: None present. 3. Capability inventory: Access to Bash (git, gh) and Read tools. 4. Sanitization: The skill does not explicitly sanitize data retrieved from the repository before incorporating it into the generated PR description.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 08:18 AM