pr-review

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • Local Review Scope: The skill is designed to perform code reviews against local diffs or staged changes. It explicitly avoids posting findings to GitHub or other external services, which minimizes the risk of accidental information disclosure to external repositories.
  • Agent Delegation: The skill uses a delegation pattern to pass the actual review work to a dedicated 'pr-review-agent'. This modular design isolates the instructional logic from the execution logic, which is a standard practice in complex agent systems.
  • Data Processing Surface: While the skill provides a framework for analyzing external data (code diffs), it does not contain code that directly executes or evaluates the content of those diffs. The primary purpose is to orient the agent on how to structure its feedback across different review lenses like correctness and architecture.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 05:42 PM
Security Audit — agent-trust-hub — pr-review