babysit-pr
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages standard developer CLI tools (git, gh, bk, vercel, flyctl) to perform repository management and CI/CD operations.
- It utilizes CronCreate to establish a recurring schedule for monitoring pull request health and status.
- [PROMPT_INJECTION]: The skill is designed to ingest and act upon data from external sources, specifically pull request comments and review summaries.
- Ingestion points: Fetches unresolved review threads, PR reviews, and issue-level comments through the GitHub API as defined in
references/github-api.md. - Boundary markers: There are no explicit delimiters or instruction-bypass warnings defined for the ingested external data.
- Capability inventory: The skill possesses the capability to modify local source code, commit changes, and execute shell commands via integrated platform CLIs as described in
SKILL.mdandreferences/ci-platforms.md. - Sanitization: The instructions do not specify any sanitization or validation of the comment content before it is used to generate fix plans.
- Mitigation: The skill implements a critical security checkpoint in Phase 3 (Plan), where it requires explicit user review and approval of a generated fix plan before proceeding to the execution phase.
- [EXTERNAL_DOWNLOADS]: The skill interacts with and retrieves metadata from well-known technology services and platforms, including GitHub, Buildkite, Vercel, and Fly.io, using official APIs and command-line interfaces.
Audit Metadata