babysit-pr
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to monitor external Pull Request data, including reviews and checks. This creates a surface where malicious instructions could be embedded in PR metadata or comments to influence agent behavior.
- Ingestion points: Processes PR lifecycle events, reviews, and status checks (SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the skill instructions.
- Capability inventory: The skill is primarily focused on monitoring and reporting; specific dangerous tool capabilities are not defined within this file.
- Sanitization: There is no mention of sanitization or validation for the content retrieved from the PR.- [SAFE]: The skill follows standard operational patterns for repository management and does not contain any indicators of credential theft, remote code execution, or persistence mechanisms.
Audit Metadata