find-review-pr
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the GitHub CLI (
gh) to perform read-only operations (listandview) on pull requests. This is consistent with the skill's stated purpose of repository management and does not pose a security risk.\n- [SAFE]: No hardcoded credentials or sensitive file paths (e.g.,.env,.ssh/id_rsa) are accessed or exposed by the skill.\n- [SAFE]: The skill ingests untrusted data from GitHub PR bodies and titles inSKILL.md. Boundary markers are absent. Capability inventory is restricted toghCLI read-only metadata retrieval. No explicit sanitization is performed. The risk is assessed as safe due to the non-executable nature of the reporting output.\n- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation patterns were identified.
Audit Metadata