code-review
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- GitHub CLI Usage: The skill uses
gh pr diff,gh pr view, andgh apito interact with GitHub resources. These are standard tools for a code review workflow and are used to retrieve code changes and post comments back to the PR. - PowerShell Script Execution: The documentation references the use of
.github/scripts/post-inline-review.ps1andpost-ai-summary-comment.ps1. These scripts are part of the repository's infrastructure and are intended for automating the posting of review findings. - Input Handling: The skill takes a
pr_numberas input. While this flows into shell commands (e.g.,gh pr diff <PR_NUMBER>), the context is limited to developer-centric GitHub operations which is typical for this category of skill. - Agent Delegation: It delegates complex analysis to a sub-agent (
maui-expert-reviewer.md), which is a standard pattern for modularizing specialized review logic. - Explicit Safety Constraints: The skill includes clear instructions to never use the
--approveor--request-changesflags, ensuring that final merge decisions remain with human reviewers.
Audit Metadata