pr-ready
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes standard, well-known CLI tools (
git,gh,jq) to perform PR management tasks, which is consistent with its stated purpose. - [SAFE]: Security best practices for automation are implemented, such as setting
GIT_EDITOR=trueandGIT_TERMINAL_PROMPT=0to prevent the agent from hanging on interactive prompts. - [SAFE]: Data integrity is prioritized through the use of
git worktreefor isolated processing and the creation of local patch files (~/.agents/pr-ready-dirty-<date>.patch) to back up uncommitted work before potentially destructive git operations. - [SAFE]: The skill includes a validation mechanism (
--probe-rebase) that tests branch linearizations in a detached worktree, ensuring the main repository state remains clean until the operation is proven to be successful. - [SAFE]: Communication with external services is limited to official GitHub APIs via the authenticated GitHub CLI, representing standard operational behavior for this use case.
- [SAFE]: No evidence of hardcoded credentials, obfuscation, or unauthorized remote code execution was identified in the instructions or the accompanying shell script.
Audit Metadata