pr-security-review
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection (Category 8) because its primary workflow involves ingesting and analyzing untrusted data in the form of pull request diffs.
- Ingestion points: The skill uses
get_diff,get_files, andgh pr diffto ingest external content into the agent's context. - Boundary markers: The instructions do not define clear delimiters or provide 'ignore' directives to prevent the agent from being influenced by instructions embedded within the analyzed code diffs.
- Capability inventory: The agent possesses capabilities to execute shell commands (
gh,npm, PowerShell) and perform file system analysis. - Sanitization: There is no explicit sanitization or validation of the diff content before it is processed by the agent's reasoning engine.
Audit Metadata