skills/enitrat/skill-issue/pr-review/Gen Agent Trust Hub

pr-review

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/gh_pr.py uses subprocess.run to interact with the local git environment and the GitHub CLI (gh). These operations (e.g., git fetch, git worktree, gh auth token) are necessary for the skill's primary function of managing PR reviews and local code context. Arguments are generally handled safely via list-style execution, though the checkout and cleanup commands operate on paths in /tmp that include user-supplied repository and PR identifiers.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 08:45 AM