pr-ready

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes standard, well-known CLI tools (git, gh, jq) to perform PR management tasks, which is consistent with its stated purpose.
  • [SAFE]: Security best practices for automation are implemented, such as setting GIT_EDITOR=true and GIT_TERMINAL_PROMPT=0 to prevent the agent from hanging on interactive prompts.
  • [SAFE]: Data integrity is prioritized through the use of git worktree for isolated processing and the creation of local patch files (~/.agents/pr-ready-dirty-<date>.patch) to back up uncommitted work before potentially destructive git operations.
  • [SAFE]: The skill includes a validation mechanism (--probe-rebase) that tests branch linearizations in a detached worktree, ensuring the main repository state remains clean until the operation is proven to be successful.
  • [SAFE]: Communication with external services is limited to official GitHub APIs via the authenticated GitHub CLI, representing standard operational behavior for this use case.
  • [SAFE]: No evidence of hardcoded credentials, obfuscation, or unauthorized remote code execution was identified in the instructions or the accompanying shell script.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 09:30 AM
Security Audit — agent-trust-hub — pr-ready