p9
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill script
scripts/p9.pyinteracts with development tools and system utilities via thesubprocessmodule to manage pull request lifecycles.\n - Evidence: The script invokes
gh(GitHub CLI),git,bun, andpytestto perform tasks such as watching PR checks, merging branches, and executing build or test cycles.\n- [COMMAND_EXECUTION]: Thehealsubcommand executes remediation commands usingsubprocess.runwithshell=True.\n - Evidence: These commands (e.g.,
bun run lint:fix) are sourced from a pre-defined rubric in the code and are only triggered when failure logs match specific regex patterns. This execution is limited to a set of hardcoded development tasks.\n- [COMMAND_EXECUTION]: Theconformancecommand allows the test runner to be customized through theBROOMVA_P9_PYTESTenvironment variable.\n - Evidence: The environment variable is split into a command list and executed, providing a standard mechanism for developers to specify their preferred test environment.\n- [SAFE]: The skill processes external data in the form of CI build logs to determine failure categories and remediation actions.\n
- Ingestion points: Output from
gh run view --log-failedor input provided via standard input.\n - Boundary markers: None.\n
- Capability inventory: Execution of pre-defined development commands via subprocess.\n
- Sanitization: Remediation commands are selected from a static list in the code based on regex matching and are not constructed from the content of the builds logs, preventing command injection via build output.
Audit Metadata