skills/mui/mui-public/pr-review/Gen Agent Trust Hub

pr-review

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for a code review agent to analyze git diffs for bugs, test coverage, simplifications, and documentation issues. It includes a structured methodology for multi-agent coordination (finders, specialists, verifiers, and sweeps).
  • [COMMAND_EXECUTION]: The skill uses git diff, git show, and grep to analyze local code. These are standard development operations for the stated purpose of PR review.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill defines a contract for subagents that includes a specific template for scope resolution (Review ONLY: <resolved diff command>). While it mentions variables, it does so to define a data-only context for sub-agents and does not include execution of untrusted user input at skill load time.
  • [DATA_EXFILTRATION]: The skill includes functionality to post comments to GitHub via gh pr comment and gh api. This is the intended behavior for a PR review tool and targets the official GitHub API.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 02:47 AM
Security Audit — agent-trust-hub — pr-review