pr-review
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- Automated Git Integration: The skill utilizes standard git commands (diff, status, log) to automatically determine the scope of changes and extract code for review. This is a standard pattern for developer-oriented automation.
- Parallel Analysis Orchestration: It employs the platform's task tool to delegate specialized reviews to sub-agents. This modular approach allows for comprehensive coverage of various domains like security, UX, and packaging.
- Cross-Model Validation: The inclusion of a multi-model cross-check sub-agent provides a verification layer where high-severity findings are reviewed by a different model family to mitigate hallucinations and ensure accuracy.
- External Data Ingestion Surface: The orchestrator processes external source code (from PRs). While this constitutes an indirect prompt injection surface typical of code-review tools, the skill includes specific instructions for sub-agents to focus on evidence-based findings and maintain high signal-to-noise ratios.
- Strict Operational Scope: The skill is designed to report findings to the user without automatically applying code changes or executing build scripts, maintaining a safe, advisory-only posture.
Audit Metadata