pr-review-checklist
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external GitHub pull requests, creating a surface for indirect prompt injection.
- Ingestion points: Pull request descriptions, commit messages, and code diffs retrieved from the specified repository and PR number.
- Boundary markers: The skill instructions do not define boundary markers or clear separators to distinguish between the agent's instructions and the content being reviewed.
- Capability inventory: The skill utilizes the CODE_REVIEW feature to perform deep analysis and generate structured output summaries.
- Sanitization: No evidence of input sanitization or validation is present to detect or ignore instructional content embedded within the pull request data.
Audit Metadata