github-review-pr
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes a comprehensive 'Trust Boundary', explicitly instructing the agent to treat pull request content as untrusted data and recommending isolated sandboxes for running any tests or scripts to prevent secret leakage. This effectively addresses the surface risk of processing external contributions.
- [SAFE]: Implements mandatory integrity checks using immutable Git OIDs (Object Identifiers). This ensures the analysis remains valid even if the remote branch is updated during the review process, preventing common race-condition vulnerabilities such as time-of-check to time-of-use (TOCTOU).
- [SAFE]: All network activity is restricted to well-known and trusted services, specifically GitHub (via the gh CLI and git) and Anthropic's official documentation for open-source program eligibility. No suspicious or unverified third-party domains are contacted.
- [SAFE]: Mutation actions, including merging, pushing repairs, and closing PRs, are strictly gated behind a requirement for narrow, explicit user authorization and a thorough revalidation of the repository environment immediately before execution.
Audit Metadata