make-pr-easy-to-review
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs
gitandgh(GitHub CLI) for repository inspection and pull request management. The commands used, such asgh pr view,git fetch, andgit rev-parse, are standard for the tool's intended purpose of preparing and tidying PRs. - [INDIRECT_PROMPT_INJECTION]: As the skill ingests external data from GitHub (including PR descriptions and commit messages), it is theoretically susceptible to indirect prompt injection. However, the skill explicitly includes a validation step that compares the original tree hash with the new tree hash (
git rev-parse origin/<headRefName>^{tree}) to ensure the underlying code behavior is not modified during history cleanup, significantly mitigating the risk of malicious code injection.
Audit Metadata