pr
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
gh api user --jq .login. This is a standard GitHub CLI command used here for environment discovery to determine the identity of the user and apply localization logic for PR comments. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by referencing a
GLOSSARY.mdfile to adopt domain-specific language. This ingestion surface is limited to terminology mapping and does not involve executing instructions embedded in the data. - [SAFE]: The skill's primary function is to provide markdown templates and formatting instructions for developers. The logic is transparent and focuses on improving PR review quality through structured evidence and diagrams.
Audit Metadata