pr-comment-resolution
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard GitHub CLI operations and local development commands (build, test, lint) that are appropriate for its task of PR comment resolution.
- [PROMPT_INJECTION]: The skill processes untrusted data from GitHub pull request comments, creating a potential surface for indirect prompt injection. Ingestion points: Fetches PR metadata, review summaries, and inline comments from GitHub (SKILL.md). Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the workflow. Capability inventory: The skill has the ability to modify local code files, execute build/test commands, and perform GitHub API mutations like replying to or resolving threads (SKILL.md). Sanitization: No explicit sanitization or validation of the fetched comment content is mentioned. This surface is evaluated as safe given it is central to the skill's primary purpose and no malicious intent is visible.
Audit Metadata