gh-review-suggestions
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from GitHub pull requests, creating a risk surface for indirect prompt injection.\n
- Ingestion points: Data enters the workflow through
gh pr viewandgh pr diffcommands as described inSKILL.md.\n - Boundary markers: The instructions do not define delimiters or specific warnings to prevent the agent from executing instructions potentially hidden within the reviewed code.\n
- Capability inventory: The skill has the ability to post comments and reviews back to the repository using
gh api.\n - Sanitization: No sanitization, escaping, or validation of the PR content is performed before processing.
Audit Metadata