pr-feedback-quality-gate
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon pull request feedback and review comments, which are external and untrusted sources.
- Ingestion points: Pull request comments, reviews, and status checks are read in Step 1 of the workflow (SKILL.md).
- Boundary markers: Step 6 includes clear instructions to treat external feedback as evidence rather than authority and to reject suggestions that conflict with safety or ownership boundaries.
- Capability inventory: The skill uses file modification, repository gates (e.g., pnpm guard), and git commands (commit, push) to fulfill its tasks.
- Sanitization: The skill relies on the agent's evaluative reasoning to filter external input as per the provided guidelines.
- [COMMAND_EXECUTION]: The workflow requires executing shell commands for repository maintenance and validation.
- Validations include running pnpm guard, builds, and tests.
- Lifecycle commands include git commit and git push to synchronize changes.
Audit Metadata