ds-pr-comments
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content derived from code reviews and PRs, which serves as a potential vector for indirect prompt injection from external sources.
- Ingestion points: Content extracted from GitHub Pull Requests, including quotes and attachments (SKILL.md).
- Boundary markers: The skill mandates a specific Markdown note block for attribution, which helps separate agent-generated content from the context.
- Capability inventory: The agent is authorized to post comments and resolve threads on GitHub.
- Sanitization: The skill contains explicit instructions for the agent to scan for and remove secrets, tokens, and private paths before posting.
Audit Metadata