validate-pr

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local toolchains including cargo, uv, and make to validate changes.
  • [REMOTE_CODE_EXECUTION]: By design, the skill executes test scripts and Makefiles contained within the repository. This includes any code introduced or modified in the pull request being validated.
  • [DATA_EXFILTRATION]: Validation summaries are posted to the GitHub pull request using the gh command-line tool.
  • [PROMPT_INJECTION]: The skill processes untrusted data from pull request diffs which may contain instructions that could influence the agent's logic. Ingestion points: gh pr diff output in Step 1. Boundary markers: None present. Capability inventory: Shell execution (cargo, uv, make) and GitHub API interaction (gh). Sanitization: None performed.
  • [EXTERNAL_DOWNLOADS]: The skill uses language-specific package managers to fetch dependencies from public registries during the build and test process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 01:39 AM
Security Audit — agent-trust-hub — validate-pr