pr-review-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard best practices from a well-known service (Vercel Labs' GitHub repository) for React development. This is a common and safe reference for developers.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on pull requests and diffs, which are untrusted external data sources. However, the instructions include specific safety guardrails for handling secrets (flagging and redacting rather than pasting) and focuses on read-only analysis without automated execution of the code being reviewed.
- [SAFE]: The repository links and NPM package names align with the author's identified vendor namespace (@skillcodex and bh611627) and point to standard version control and registry platforms.
Audit Metadata