review-pr
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs dynamic environment discovery at load time using the
!commandsyntax. It checks for the availability of theghandjiraCLIs and verifies the presence of thehyperfleet-architectureskill in the local filesystem to enable optional features. - [COMMAND_EXECUTION]: Uses the
Bashtool to execute CLI commands (gh,jira,git) that incorporate user-provided arguments, such as PR URLs. To mitigate command injection risks, the skill requires a mandatory validation step to verify the format of the PR reference before any commands are executed. - [EXTERNAL_DOWNLOADS]: Fetches markdown-based architecture standards and guidelines from the author's GitHub repository (
openshift-hyperfleet/architecture). These files are used as reference material for the review agents. As these resources belong to the skill's author, they represent expected vendor functionality. - [PROMPT_INJECTION]: The skill ingests untrusted data from external sources, including GitHub PR titles, bodies, comments, and JIRA ticket descriptions. This creates a surface for indirect prompt injection. The skill provides explicit instructions to the agent to treat all fetched content strictly as data for analysis and never as commands to be followed.
- [COMMAND_EXECUTION]: Coordinates multiple sub-agents using the
Agenttool to perform parallel mechanical code passes and impact analysis. These agents process the PR diff and standards but are restricted by the parent skill's instructions regarding untrusted content.
Audit Metadata