nemoclaw-contributor-create-pr
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard command-line tools, including
git,gh(GitHub CLI), andnpm. These tools are used to verify the local branch state, check commit history, and submit the pull request. All commands are executed within the context of a local development environment and target specific project-related tasks. - [EXTERNAL_DOWNLOADS]: The skill fetches the repository's pull request template and commit verification data from the official
NVIDIA/NemoClawGitHub repository. These requests are made using thegit showandgh apicommands. Interacting with these official project resources is standard behavior for a contribution tool and does not involve untrusted third-party sources. - [DYNAMIC_EXECUTION]: The skill executes local scripts such as
npm run validate:prandnpx vitest. These commands are used for quality assurance (linting, testing) as part of the pull request preparation process. They run locally defined tasks within the contributor's environment.
Audit Metadata