create-contributor-prs

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the GitHub CLI (gh) to perform repository management tasks, including listing pull requests, viewing PR metadata, fetching workflow run logs, and dispatching workflows. These operations are restricted to the brave/brave-core repository and are consistent with the skill's stated purpose.
  • [SAFE]: The skill includes a mandatory confirmation step before performing batch workflow dispatches, ensuring human-in-the-loop oversight for CI resource consumption.
  • [SAFE]: Data extraction from workflow logs is performed using a strict regular expression ([0-9a-f]{40}) to capture only commit hashes, which serves as an effective sanitization layer against potentially malicious log content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 03:12 PM
Security Audit — agent-trust-hub — create-contributor-prs