review-pr
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Git commands including
git fetch,git log, andgit diffto retrieve and analyze code changes from Pull Requests. These operations are essential to the skill's primary function and are performed within the local repository context. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks common to code review tools that process external data.
- Ingestion points: PR diff content retrieved via Git commands in
SKILL.md. - Boundary markers: None explicitly defined in the instructions to separate code content from instructions.
- Capability inventory: Execution of shell commands (Git) and the ability to spawn subagents for analysis.
- Sanitization: No specific sanitization or escaping of the diff content is mandated before the agent processes it.
Audit Metadata