pr-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data which could contain malicious instructions aimed at influencing the agent's behavior.
- Ingestion points: The skill requests external data including 'PR diff and context of change', 'Related issues or requirements', and 'Test results and coverage data' in the SKILL.md file.
- Boundary markers: There are no specific instructions or delimiters defined to help the agent distinguish between data to be analyzed and potential commands embedded within that data.
- Capability inventory: Analysis of the skill body shows no dangerous capabilities such as network operations, file system modifications, or shell command execution.
- Sanitization: The instructions do not include any measures for sanitizing or validating the ingested external content.
Audit Metadata