pull-request

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches pull request data, review comments, and CI logs from GitHub using the official gh CLI. These are standard operations for a development-oriented tool interacting with a trusted, well-known service.
  • [COMMAND_EXECUTION]: Executes several bundled Bash scripts for PR tasks such as parsing issue numbers from branches and managing remote resolution. These scripts are local to the skill and use standard system utilities like git, jq, and awk.
  • [COMMAND_EXECUTION]: Incorporates mandatory verification gates (e.g., Phase 1.3 and 3.2) that instruct the agent to validate external claims against code and documentation. This design pattern serves as a safeguard against indirect prompt injection from untrusted PR comments or log content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 07:55 PM
Security Audit — agent-trust-hub — pull-request