resolve-pr-parallel
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external data from PR comments to guide agent tasks.\n
- Ingestion points: Pull request comments are retrieved via
gh pr viewand the GitHub API as defined inSKILL.md.\n - Boundary markers: There are no delimiters or specific instructions provided to the subagents to ignore instructions embedded within the PR comments.\n
- Capability inventory: The skill has permissions to write to the filesystem (convention documentation) and perform git operations (
git commit,git push).\n - Sanitization: Comment content is passed to subagents without validation or sanitization.\n- [COMMAND_EXECUTION]: The skill uses command-line tools for legitimate project management actions.\n
- Evidence: Utilizes
ghfor retrieving PR status and metadata, andgitfor committing and pushing updates to the repository.
Audit Metadata