skills/onyx-dot-app/onyx/check-pr/Gen Agent Trust Hub

check-pr

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard version control commands using git, gh, glab, and p4 to fetch metadata and perform repository operations.
  • Evidence: Commands like gh pr view, glab mr view, and p4 describe are used to retrieve information about pull requests and changelists.
  • [REMOTE_CODE_EXECUTION]: No remote script downloads or piped execution patterns (e.g., curl | bash) were detected. All API interactions are with official platforms (GitHub, GitLab) or local Perforce servers.
  • [DATA_EXFILTRATION]: No sensitive file access (e.g., .ssh, .aws, .env) or exfiltration to third-party domains was found. The skill operates within the scope of the user's authenticated VCS environment.
  • [PROMPT_INJECTION]: Instructions are focused on PR analysis and do not contain patterns for bypassing safety guidelines or overriding system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 06:17 PM