ci-loop
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gh(GitHub CLI) andgittools to view PR status, download failing logs, manage isolated worktrees, and push fixes to remote branches. - [DYNAMIC_EXECUTION]: The workflow requires reproducing failing CI jobs locally, which involves executing the repository's own test and build commands. This is consistent with the skill's purpose as a software development tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from GitHub PR descriptions, issue comments, and CI logs.
- Ingestion points: External data is retrieved via
gh pr viewandgh run view --log-failedas specified in SKILL.md. - Boundary markers: There are no explicit delimiters or instructions defined in the skill to isolate this external text from the agent's internal logic.
- Capability inventory: The agent has the capability to execute shell commands, modify the filesystem, and push code to remote repositories.
- Sanitization: No specific sanitization or filtering of the retrieved log content or PR text is mentioned before it is processed by the agent.
Audit Metadata