code-review
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) to retrieve pull request information and verify the user's authentication status.
- Evidence:
gh pr viewandgh auth statuscommands listed in the Error Handling section of SKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill acts as an analysis engine for untrusted external content, creating a surface for indirect prompt injection attacks where code being reviewed could influence the agent's behavior.
- Ingestion points: The skill instructions require the agent to 'Analyze the diff and pre-loaded PR context' and 'Read changed files to understand full context' (SKILL.md).
- Boundary markers: The skill does not provide specific instructions or delimiters to ensure the agent distinguishes between the developer's instructions and the content of the files being reviewed.
- Capability inventory: The skill has the capability to read any file in the repository and execute GitHub CLI commands.
- Sanitization: There is no logic provided to sanitize or filter the content of the pull request or the source files before processing them.
Audit Metadata