review-pr
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation and a YAML configuration file. It does not include any executable scripts, binaries, or active code components.- [SAFE]: All external references and commands target well-known, trusted services. Specifically, it utilizes the official GitHub CLI (
gh) and standardgitcommands for interaction with GitHub repositories. These are standard industry tools for version control and CI/CD.- [SAFE]: The skill implements security best practices by recommending the use ofgit stashto preserve local work and performing operations in detached checkouts or temporary worktrees to prevent accidental modification of the user's primary workspace.- [SAFE]: The 'UI Smoke' section provides guidelines for capturing evidence using legitimate browser capabilities (like Playwright or IDE browsers) and explicitly warns against using synthetic or fake screenshots.
Audit Metadata