pr-address-comments

Warn

Audited by Runlayer on Feb 25, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
81%
Files
2
Flagged
2
Chunks
2
Flagged Files (2)
pr-address-comments/scripts/fetch-pr-info.jsMEDIUM
80.8%

Malicious tool definition detected

Tool: pr-address-comments/scripts/fetch-pr-info.js Description: #!/usr/bin/env node /** * @license * Copyright 2025 Google LLC * SPDX-License-Identifier: Apache-2.0 */ /* eslint-env node */ /* global console, process */ import { exec } from 'node:child_process'; import { promisify } from 'node:util'; const execAsync = promisify(exec); async function run(cmd) { try { const { stdout } = await execAsync(cmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'ignore'], }); return stdout.trim(); } catch (_

pr-address-comments/SKILL.mdLOW
58.5%

Tool passed security scan

Audit Metadata
Max File Score
81%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
2
Files Flagged
2
Chunks Analyzed
2
Analyzed
Feb 25, 2026, 09:07 PM
Security Audit — runlayer — pr-address-comments