evaluate-pr-tests
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The skill uses PowerShell scripts (
Gather-TestContext.ps1) and the GitHub CLI (gh) to gather PR context and download file contents. These operations are restricted to the local repository environment and the official GitHub API to facilitate the intended analysis. - [External Downloads]: The
Gather-TestContext.ps1script includes functionality to download files from the pull request's head branch via the GitHub API (gh api). This is a documented feature used when the PR files are not present in the local checkout, ensuring the agent can analyze the relevant code. The downloads are scoped to the official repository using theGITHUB_REPOSITORYenvironment variable and include path traversal guards to ensure files remain within the repository root. - [Automated Convention Checks]: The provided PowerShell script performs static analysis on test files to identify anti-patterns such as hardcoded delays (
Thread.Sleep), obsolete API usage, and missing synchronization patterns. These checks are diagnostic and intended to improve test reliability.
Audit Metadata