fix-release-pr

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a transparent workflow for managing release PRs in the ClickHouse/clickhouse-js repository. All operations are standard for development and target the official vendor infrastructure.
  • [COMMAND_EXECUTION]: The skill utilizes local CLI tools such as git, gh (GitHub CLI), npm, and node to gather PR information, apply fixes, and verify code. These actions are documented and essential for the workflow's purpose.
  • [PROMPT_INJECTION]: The skill processes untrusted external data from GitHub PR comments and CI failure logs via the gh api and gh run view commands. While this introduces a potential indirect prompt injection surface, it is a necessary functional requirement for diagnosing PR issues, and no automated execution of commands parsed from this data is performed without agent mediation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 09:41 AM
Security Audit — agent-trust-hub — fix-release-pr