gh-review-requests
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the GitHub CLI (
gh) via a Python script to interact with the GitHub API. This is a standard and safe way to retrieve repository and team information when properly scoped to the intended organization ('getsentry'). - [COMMAND_EXECUTION]: The Python script uses
subprocess.runwith a list of arguments, which is a secure practice that prevents shell injection vulnerabilities. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill accesses GitHub notification and team data, but this data is only used to display pull request information to the user as intended. There are no unauthorized network operations or data transfers to external domains.
Audit Metadata