Unsanitized inputs to `gh pr create`
Claims to do
Finishing a Development Branch: Guide completion of development work by presenting clear options and handling chosen workflow.
Actually does
This skill executes various `git` commands to manage development branches, including running project-specific test commands (`npm test`, `cargo test`, `pytest`, `go test`), determining base branches, merging branches locally, pushing branches to a remote `origin`, creating GitHub pull requests using `gh pr create`, and deleting local branches and git worktrees. It contacts the remote git repository and the GitHub API.
/plugin marketplace add obra/superpowers/plugin install finishing-a-development-branch@obra/superpowersgemini extensions install https://github.com/obra/superpowers.git --consentnpx skills add https://github.com/obra/superpowersThe `gh pr create` command embeds dynamic content (title, body) into a shell command. Without explicit sanitization of these inputs, an attacker could inject malicious shell commands.
gh pr create --title "<title>" --body "$(cat <<'EOF' ... EOF)"
[](https://mondoo.com/ai-agent-security/skills/github/obra/superpowers/finishing-a-development-branch)<a href="https://mondoo.com/ai-agent-security/skills/github/obra/superpowers/finishing-a-development-branch"><img src="https://mondoo.com/ai-agent-security/api/badge/github/obra/superpowers/finishing-a-development-branch.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/obra/superpowers/finishing-a-development-branch.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.