autopilot-pr-triage-scheduler
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Command Execution: The skill uses the GitHub CLI (gh) to retrieve pull request data and repository metadata. This is standard functionality for repository management and is used here specifically to populate the triage queue.\n- Dynamic Script Loading: The fetch_queue.py script utilizes runpy.run_path to import logic from its sibling script triage_state.py. This pattern is used for internal code sharing and is limited to the skill's own file system structure.\n- Input Filtering: To manage the triage queue efficiently, the skill performs heuristic analysis on pull request bodies (checking for spam, empty content, or template-only submissions). These checks use text analysis rather than execution, acting as a safeguard for the scheduling process.\n- Least Privilege Access: The skill is configured with a strict read-only policy (write: off), preventing it from making unauthorized modifications, comments, or assignments to the repository.
Audit Metadata