ci-loop

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the gh (GitHub CLI) and git tools to view PR status, download failing logs, manage isolated worktrees, and push fixes to remote branches.
  • [DYNAMIC_EXECUTION]: The workflow requires reproducing failing CI jobs locally, which involves executing the repository's own test and build commands. This is consistent with the skill's purpose as a software development tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from GitHub PR descriptions, issue comments, and CI logs.
  • Ingestion points: External data is retrieved via gh pr view and gh run view --log-failed as specified in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions defined in the skill to isolate this external text from the agent's internal logic.
  • Capability inventory: The agent has the capability to execute shell commands, modify the filesystem, and push code to remote repositories.
  • Sanitization: No specific sanitization or filtering of the retrieved log content or PR text is mentioned before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 06:33 AM