code-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local environment using the Python
subprocessmodule to perform git operations and to coordinate the analysis workflow between its bundled scripts. - Evidence:
run_git_commandinscripts/pr_analyzer.pyexecutesgit diffandgit logto extract pull request changes. - Evidence:
run_pr_analyzerandrun_quality_checkerinscripts/review_report_generator.pyexecute the analysis scripts viasys.executableto generate aggregate reports. - Observation: All commands are executed using argument lists with
shell=False, which prevents command injection vulnerabilities. The operations are strictly limited to local repository metadata and the skill's own analysis logic.
Audit Metadata