review-and-ship
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill leverages standard command-line utilities including
gitandgh(GitHub CLI) for version control and PR management. These are legitimate tools used for their intended purpose within a development environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as source code diffs and chat history to generate review findings.
- Ingestion points: Reads output from
git diff,git status, and recent chat context. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Limited to
git(fetch, diff, status, commit, push) andgh(pr checks, pr open/update). - Sanitization: Not explicitly mentioned; however, the scope of tools is restricted to standard development workflows.
Audit Metadata