review-vcpkg-prs-today

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • Data Ingestion from External Sources: The skill processes information from GitHub pull requests to perform its reviews. While necessary for its functionality, this represents a surface where content from pull requests is introduced into the agent's context. Boundary markers for this data are not explicitly defined in the instructions.
  • Automated Script Generation: The skill is designed to generate a PowerShell script (cleanup-worktrees.ps1) to manage the removal of temporary git worktrees. This automated file creation is a standard part of the skill's cleanup procedure.
  • Command and Tool Interaction: The procedure involves the use of the gh CLI and the vcpkg executable. To ensure safety during parallel execution, the skill implements isolation by copying the binary into dedicated workspaces and using detached worktrees, which prevents interference with the user's active branch state.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:58 PM
Security Audit — agent-trust-hub — review-vcpkg-prs-today