nemoclaw-maintainer-find-review-pr

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the official GitHub CLI (gh) to interact with repository data. This is a standard and safe practice for repository maintenance tasks.
  • [SAFE]: Data access is limited to PR metadata (titles, bodies, labels, authors). No sensitive local files, environment variables, or credentials are accessed or exfiltrated.
  • [SAFE]: No remote code execution, obfuscation, or persistence mechanisms were detected. The commands use standard, well-documented tool flags.
  • [SAFE]: While the skill processes user-generated content from PRs (an indirect prompt injection surface), the processing is restricted to structural parsing and summary presentation, which constitutes a low-risk data ingestion profile.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 11:34 PM