pr-review
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command-Line Integration: The skill instructions use the
gh(GitHub) CLI andgitto retrieve pull request metadata, diffs, and search source code. This is consistent with the skill's stated purpose of verifying documentation against a codebase. - External Data Ingestion: The skill processes content from pull requests, which is an external data source. It extracts factual claims from these documents for verification. While this represents a data ingestion surface, the skill is designed to analyze text rather than execute instructions found within the PR content.
- Scoped Repository Access: The skill focuses its queries on specific, official repositories (
microsoft/vscodeandmicrosoft/vscode-copilot-chat). This localized scope helps ensure that interactions are limited to trusted source code environments.
Audit Metadata