pr-threads-address
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
agynio/gh-pr-reviewextension via theghCLI. While GitHub is a well-known service, this extension comes from a third-party user account and is not part of the primary vendor's verified organization repositories. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted PR review comments and uses them to guide code modifications, creating a risk for indirect prompt injection.
- Ingestion points: PR review threads and comments are retrieved using
gh pr-review review viewas defined inSKILL.md. - Boundary markers: The skill does not provide delimiters or "ignore" instructions to separate external comment data from the agent's core instructions.
- Capability inventory: The agent possesses the capability to modify files, create new unit tests, and commit changes to the repository.
- Sanitization: No sanitization, validation, or escaping of the PR comment content is performed before the agent acts on the requested feedback.
Audit Metadata