pr-blast-radius
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script (
scan.sh) designed to be executed by the developer locally. It runs standard git commands (git diff,git rev-list,git status) to analyze the code diff between branches. This is expected behavior for a repository analysis tool. - [NO_CODE]: The logic resides entirely in the provided local shell script and markdown instructions; there are no external dependencies, remote script downloads, or obfuscated payloads detected.
- [DATA_EXPOSURE]: The script reads local repository metadata and environment variable names (via regex on
process.env) to summarize them for the user, but it does not transmit this data externally or store it in an insecure manner.
Audit Metadata