findings-to-gh-pr-review
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official GitHub CLI (
gh) to perform legitimate pull request operations, such as viewing details, querying the GraphQL API, and posting review comments to GitHub's infrastructure. - [SAFE]: The commands and data structures used (e.g.,
gh pr view,gh api graphql) are standard for interacting with GitHub. Data ingestion from pull requests is a core requirement of the skill's functionality and is handled via structured API calls rather than potentially dangerous shell interpolation. - [SAFE]: No obfuscation, data exfiltration to unauthorized domains, credential harvesting, or unauthorized remote code execution patterns were detected in the instructions or configuration files.
Audit Metadata