pending-pr-review
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by design, as it is required to process untrusted data from GitHub Pull Requests.
- Ingestion points: The skill retrieves external data using
gh pr view,gh pr diff, and by reading files such asAGENTS.mdand existing source code within the repository. - Boundary markers: The instructions do not specify the use of delimiters or specific system instructions to prevent the agent from following directions that might be embedded within the PR description, comments, or the code being reviewed.
- Capability inventory: The skill uses the
gh(GitHub CLI) andgittools to read PR metadata and diffs. It does not perform writes or execute the code being reviewed. - Sanitization: There is no evidence of sanitization or filtering of the content retrieved from the PR before it is processed by the agent.
Audit Metadata