pr-address-comments
Warn
Audited by Runlayer on Feb 25, 2026
Risk Level: MEDIUM
Scan Summary
Flagged Files (2)
pr-address-comments/scripts/fetch-pr-info.jsMEDIUM
80.8%
Malicious tool definition detected
Tool: pr-address-comments/scripts/fetch-pr-info.js Description: #!/usr/bin/env node /** * @license * Copyright 2025 Google LLC * SPDX-License-Identifier: Apache-2.0 */ /* eslint-env node */ /* global console, process */ import { exec } from 'node:child_process'; import { promisify } from 'node:util'; const execAsync = promisify(exec); async function run(cmd) { try { const { stdout } = await execAsync(cmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'ignore'], }); return stdout.trim(); } catch (_
pr-address-comments/SKILL.mdLOW
58.5%
Tool passed security scan
Audit Metadata