jr-rails-pr-tour
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs several static analysis tools as Ruby gems, including
attractor,flog, andreek, along with their language-specific plugins. These tools are used to calculate code complexity and detect smells. - [COMMAND_EXECUTION]: The skill executes shell commands to interact with the local git repository and host platforms (GitHub and GitLab) via their respective CLIs (
ghandglab). It also utilizesdockeranddevcontainercommands to manage ephemeral QA environments. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes untrusted content from the repository under review.
- Ingestion points: PR metadata (titles, bodies) and file contents are read into the agent's context via
gh pr view,glab mr view, andgit show(Phase 0 inreferences/guide.md). - Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions for the data ingested from the PR.
- Capability inventory: The skill possesses significant capabilities, including shell command execution, file system access, and the ability to post comments to external platforms.
- Sanitization: While the output is formatted according to Simplified Technical English, there is no specific technical sanitization of the input data before it is processed or used in narrative generation.
Audit Metadata