fix-pr-issues
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard GitHub CLI (
gh) and Git commands to manage pull request workflows, which is consistent with its stated purpose and the provided vendor (basicmachines-co) context. - [PROMPT_INJECTION]: The skill processes untrusted external data from GitHub pull request comments, review summaries, and action logs. While this creates a surface for indirect prompt injection, the risk is inherent to the primary purpose of pull request automation. Ingestion points: PR comments, review summaries, inline comments, failed job logs, and the
BM_BOSSBOT_SUMMARYblock (SKILL.md). Boundary markers: None identified. Capability inventory: File reading/editing,git commit, andgit push(SKILL.md). Sanitization: None identified.
Audit Metadata