responding-to-pr-review-comments
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data in the form of GitHub pull request comments, creating a surface for indirect prompt injection.
- Ingestion points: The
subagents/review-comment-collector.mdsubagent is responsible for gathering comment bodies, summaries, and thread metadata from external PR URLs. - Boundary markers: The workflow utilizes discrete subagents and structured status contracts (defined in
references/status-contracts.md) to isolate data processing phases from the main orchestrator. - Capability inventory: The agent has the capability to write to the file system (via
subagents/response-report-writer.md) and perform network write operations to the GitHub API (viasubagents/thread-reply-poster.md). - Sanitization: A critical security boundary is maintained by the requirement for explicit user approval (
PREVIEW_APPROVED=true) in thesubagents/thread-reply-poster.mdfile before any replies are posted back to GitHub. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation and reference materials from external sources to support its decision-making logic.
- Fetches technical guidance from Google's engineering practices and GitHub's official documentation and CLI manuals.
- References best practices from
https://conventionalcomments.org/and Nielsen Norman Group (nngroup.com). - Fetches workflow background from
https://skills.sh/flpbalada/fb-skills/progressive-disclosure.
Audit Metadata