pr-threads-resolve
Warn
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a third-party GitHub CLI extension from an unverified source.
- Evidence: The 'Prerequisites' section in SKILL.md contains the command 'gh extension install agynio/gh-pr-review'.
- Risk: This installs and executes code from a repository owner not recognized as a trusted vendor. Dependencies on external third-party code should be audited as they introduce supply chain risks.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from PR review threads which may contain instructions from untrusted external users.
- Ingestion points: PR thread content is fetched using the 'gh pr-review threads list' command as described in SKILL.md.
- Boundary markers: The instructions lack delimiters or explicit warnings for the agent to treat fetched thread content as data rather than instructions.
- Capability inventory: The skill allows the agent to modify pull request state through the 'gh pr-review threads resolve' command.
- Sanitization: No evidence of sanitization or filtering was found for the fetched PR comments before they are processed by the agent.
Audit Metadata