fix-release-pr
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a transparent workflow for managing release PRs in the ClickHouse/clickhouse-js repository. All operations are standard for development and target the official vendor infrastructure.
- [COMMAND_EXECUTION]: The skill utilizes local CLI tools such as
git,gh(GitHub CLI),npm, andnodeto gather PR information, apply fixes, and verify code. These actions are documented and essential for the workflow's purpose. - [PROMPT_INJECTION]: The skill processes untrusted external data from GitHub PR comments and CI failure logs via the
gh apiandgh run viewcommands. While this introduces a potential indirect prompt injection surface, it is a necessary functional requirement for diagnosing PR issues, and no automated execution of commands parsed from this data is performed without agent mediation.
Audit Metadata