gh-fix-pr
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The bundled script
scripts/inspect_pr_checks.pyexecutes GitHub CLI (gh) commands usingsubprocess.run. This is used to fetch pull request data and perform management tasks. The implementation is secure as it avoids shell execution and uses argument lists. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes untrusted data from GitHub PR comments and CI logs.
- Ingestion points: Pull request comments, review summaries, and CI logs are fetched from GitHub and provided to the agent.
- Boundary markers: No explicit delimiters are used to separate external content from agent instructions, though the 'Diagnosis Report' format provides structural separation.
- Capability inventory: The agent is authorized to modify repository files to fix code issues and execute
ghcommands to resolve threads or post comments. - Sanitization: There is no evidence of sanitization or escaping of the external data fetched from GitHub.
Audit Metadata