skills/benjaming/ai-skills/pr-comment/Gen Agent Trust Hub

pr-comment

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Utilizes the GitHub CLI (gh) for fetching pull request data and posting comments via the GitHub API. These operations are restricted to the repository context and represent the core intended functionality of the skill.
  • [DATA_EXFILTRATION]: Reads findings from local JSON state files located within the ~/.claude/ directory. This data is processed and subsequently transmitted to GitHub as inline or conversation comments on the relevant pull request.
  • [SAFE]: Employs a 'human-in-the-loop' safety pattern by explicitly requiring a single confirmation after a batch preview of all drafted comments, preventing unauthorized or accidental automated posting of content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 11:38 AM
Security Audit — agent-trust-hub — pr-comment