pr-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as pull request text, commit messages, and repository documents which could be used to influence the agent's behavior.\n
- Ingestion points: External data enters the context via
gh pr view,git diff,git log, and repository files likeAGENTS.mdorCLAUDE.mdas described inSKILL.md.\n - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' commands to isolate untrusted data from instructions.\n
- Capability inventory: The skill uses
gitandghtools for repository interaction and has the ability to post findings as GitHub comments.\n - Sanitization: There is no evidence of explicit sanitization or validation steps for the content ingested from the external sources.
Audit Metadata