gh-pr-checks

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard gh (GitHub CLI) commands. These operations are limited to viewing and watching pull request check statuses and do not involve arbitrary shell command construction or dangerous script execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from GitHub regarding pull request statuses. This is a standard data retrieval process and does not pose a significant risk of influencing the agent's behavior through malicious content in the check results.
  • Ingestion points: Output from gh pr checks commands (SKILL.md).
  • Boundary markers: Not explicitly defined for the output data.
  • Capability inventory: Includes the Bash tool for executing GitHub CLI commands.
  • Sanitization: Relies on the standard output format provided by the official GitHub CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:44 PM
Security Audit — agent-trust-hub — gh-pr-checks