pr-comment-resolver
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon pull request comments, which are external, untrusted data sources. A malicious actor could provide feedback that contains hidden instructions to manipulate the agent's behavior.
- Ingestion points: The skill uses tools to fetch PR comments via
gh pr viewand the GitHub API (gh api repos/{owner}/{repo}/pulls/{pr_number}/comments), as seen in the 'PR Comment Commands' section ofSKILL.md. - Boundary markers: Absent. The instructions do not define clear delimiters or provide warnings to the agent to ignore potentially malicious instructions embedded within the comments.
- Capability inventory: The skill is granted
Write,Edit, andBashtools (as defined in theallowed-toolsfrontmatter), which allow it to modify the filesystem and execute shell commands based on the external input. - Sanitization: Absent. There are no mentions of validating or sanitizing the comment content before the agent implements the suggested changes or executes verification tests.
Audit Metadata