create-contributor-prs
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) to perform repository management tasks, including listing pull requests, viewing PR metadata, fetching workflow run logs, and dispatching workflows. These operations are restricted to thebrave/brave-corerepository and are consistent with the skill's stated purpose. - [SAFE]: The skill includes a mandatory confirmation step before performing batch workflow dispatches, ensuring human-in-the-loop oversight for CI resource consumption.
- [SAFE]: Data extraction from workflow logs is performed using a strict regular expression (
[0-9a-f]{40}) to capture only commit hashes, which serves as an effective sanitization layer against potentially malicious log content.
Audit Metadata