loop-on-ci
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard workflow for monitoring GitHub Pull Request checks using official GitHub CLI commands (
gh pr view,gh pr checks). - [SAFE]: Command usage is scoped to GitHub-related operations within the user's existing authenticated environment. No unauthorized sensitive file access or credential exposure patterns were found.
- [SAFE]: No external network requests to unverified domains, obfuscated content, or persistence mechanisms were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from CI logs via
gh run view. While this presents an injection surface common to all log-reading agents, the risk is standard for the skill's purpose, and appropriate guardrails against bypassing safety hooks are explicitly included.
Audit Metadata