github-pr-reviewer

This is intended GitHub PR-review automation that downloads PR source and delegates review to an OpenHands agent; it contains no evident fixed malicious destination or hardcoded credential. Material risks are unsanitized AUTOMATION_EVENT_PAYLOAD automation_id in state-file paths and providing an agent that processes untrusted PR content with terminal tools and secret lookup references, alongside fetching plaintext settings. Credentials involved include a GitHub personal access token, session API key, automation callback API key, KV token, and configured LLM settings; configured endpoints include api.github[.]com and environment-supplied agent, KV, and callback URLs. The provided fragment is syntactically invalid as pasted, so it would not execute unchanged; severity is moderate if corrected and deployed with untrusted PRs.