pr-reviewer
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
Bashtool to perform git operations (git diff) and interact with the GitHub CLI (gh pr view,gh pr comment). These are standard behaviors for a development-focused tool. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from pull request diffs and descriptions without sanitization or boundary markers.
- Ingestion points: PR details and code changes are ingested via
git diffandgh pr viewin Phase 1 of theSKILL.mdinstructions. - Boundary markers: Absent. The instructions for the five specialized sub-agents in Phase 2 do not include delimiters or instructions to ignore embedded commands within the code being analyzed.
- Capability inventory: The skill has access to
Bash(command execution),Write(file creation), andTask(agent spawning) across its workflow. - Sanitization: Absent. There is no evidence of input validation or escaping for the data retrieved from external sources before it is passed into the agent's context.
Audit Metadata