pr-review
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for a code review agent to analyze git diffs for bugs, test coverage, simplifications, and documentation issues. It includes a structured methodology for multi-agent coordination (finders, specialists, verifiers, and sweeps).
- [COMMAND_EXECUTION]: The skill uses
git diff,git show, andgrepto analyze local code. These are standard development operations for the stated purpose of PR review. - [DYNAMIC_CONTEXT_INJECTION]: The skill defines a contract for subagents that includes a specific template for scope resolution (
Review ONLY: <resolved diff command>). While it mentions variables, it does so to define a data-only context for sub-agents and does not include execution of untrusted user input at skill load time. - [DATA_EXFILTRATION]: The skill includes functionality to post comments to GitHub via
gh pr commentandgh api. This is the intended behavior for a PR review tool and targets the official GitHub API.
Audit Metadata