skills/boshu2/agentops/pr-retro/Gen Agent Trust Hub

pr-retro

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns were detected. The skill uses standard tools for its declared purpose.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes external PR data.
  • Ingestion points: PR comments and reviews fetched via gh pr view and gh api in SKILL.md.
  • Boundary markers: The instructions lack specific delimiters or headers to isolate external PR content.
  • Capability inventory: The skill utilizes Bash for CLI operations and Write for generating local documentation.
  • Sanitization: PR metadata and feedback are processed without explicit filtering or validation steps.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 12:18 PM
Security Audit — agent-trust-hub — pr-retro