pnp-copilot-pr-review
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes untrusted input from pull request titles, descriptions, and article contents (Markdown and YAML) to generate review feedback and code suggestions. It does not utilize explicit boundary markers or sanitization to differentiate between data and instructions within the processed files.
- [EXTERNAL_DOWNLOADS]: The skill fetches external content from GitHub repositories and Microsoft Learn to validate architectural claims and implementation alignment. These actions are performed through the
microsoft-learn-groundingskill and direct fetching of repository links cited in the documentation.
Audit Metadata