pull-request
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches pull request data, review comments, and CI logs from GitHub using the official
ghCLI. These are standard operations for a development-oriented tool interacting with a trusted, well-known service. - [COMMAND_EXECUTION]: Executes several bundled Bash scripts for PR tasks such as parsing issue numbers from branches and managing remote resolution. These scripts are local to the skill and use standard system utilities like
git,jq, andawk. - [COMMAND_EXECUTION]: Incorporates mandatory verification gates (e.g., Phase 1.3 and 3.2) that instruct the agent to validate external claims against code and documentation. This design pattern serves as a safeguard against indirect prompt injection from untrusted PR comments or log content.
Audit Metadata