skills/matematicsolutions/awesome-matematic-skills-pl/matematic-patron-pr-review-pl/Gen Agent Trust Hub
matematic-patron-pr-review-pl
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute standard development utilities such asgit diff,gh pr diff, andrg(ripgrep) to analyze code changes. These are used strictly for their intended purpose of fetching and searching source code. - [EXTERNAL_DOWNLOADS]: The skill references external GitHub repositories, specifically
dograh-hq/dograhfor structural patterns and the author's ownmatematic-anonimizacja-plfor PII protection. These are well-known or vendor-controlled sources. - [PROMPT_INJECTION]: The skill processes untrusted input in the form of pull request diffs and repository files. As a code analysis tool, this creates a surface for indirect prompt injection where instructions embedded in the code under review could potentially target the agent. However, the skill implements structured analysis rules and output formatting which act as defensive constraints.
- [DATA_EXFILTRATION]: The instructions contain proactive security policies to detect and block the exposure of sensitive information, such as PII (PESEL, NIP, names) and credentials (API keys, bearer tokens) in logs and public artifacts, which is a security best practice for LegalTech applications.
Audit Metadata