create-pr
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute routine version control operations, including
git status,git diff,git push, andgh pr create. These tools are used as intended to facilitate the pull request workflow. - [INDIRECT_PROMPT_INJECTION]: The skill reads context from the repository, such as diffs and commit history, which constitutes a potential surface for indirect prompt injection if the repository contains malicious content. 1. Ingestion points:
git diffoutput, commit logs, and the${ARGUMENTS}input. 2. Boundary markers: None present. 3. Capability inventory: Access toBash(git, gh) andReadtools. 4. Sanitization: The skill does not explicitly sanitize data retrieved from the repository before incorporating it into the generated PR description.
Audit Metadata