validate-pr
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local toolchains including cargo, uv, and make to validate changes.
- [REMOTE_CODE_EXECUTION]: By design, the skill executes test scripts and Makefiles contained within the repository. This includes any code introduced or modified in the pull request being validated.
- [DATA_EXFILTRATION]: Validation summaries are posted to the GitHub pull request using the gh command-line tool.
- [PROMPT_INJECTION]: The skill processes untrusted data from pull request diffs which may contain instructions that could influence the agent's logic. Ingestion points: gh pr diff output in Step 1. Boundary markers: None present. Capability inventory: Shell execution (cargo, uv, make) and GitHub API interaction (gh). Sanitization: None performed.
- [EXTERNAL_DOWNLOADS]: The skill uses language-specific package managers to fetch dependencies from public registries during the build and test process.
Audit Metadata