pr-review
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard version control and repository management commands using
gitandgh(GitHub CLI) to retrieve diffs and PR metadata. These are appropriate for the skill's stated purpose and use standard arguments for context acquisition. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external sources (pull request titles, descriptions, and code comments).
- Ingestion points: The
gh pr viewandgh pr diffcommands inSKILL.mdretrieve external content that the agent then analyzes. - Boundary markers: Absent. The instructions do not specify delimiters or provide a warning to the agent to ignore potentially malicious instructions embedded within the PR data.
- Capability inventory: The agent uses
gitandghCLI tools to read repository state; it does not demonstrate capabilities for file writing or arbitrary network exfiltration. - Sanitization: Absent. PR content is passed directly to the analysis step without filtering or escaping.
Audit Metadata