pre-pr-greptile
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces robust verification of external review data by comparing it to the actual branch diff (
git diff <base>...HEAD --name-only) before taking action, which effectively mitigates risks from stale or incorrect cached data returned by external APIs. - [SAFE]: It implements a tiered triage system for code fixes that prohibits the automatic application of risky logic, authentication, or security-sensitive changes, ensuring these findings require explicit user approval.
- [SAFE]: The skill provides secure guidance for handling API keys through environment variables or stdin redirection, explicitly warning against passing secrets as command-line arguments to avoid exposure in shell history or process lists.
- [SAFE]: It incorporates development security best practices, including the enforcement of GPG-signed commits and the requirement for explicit validation of target branches before pushing code.
Audit Metadata