qa-review-pr
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes pull request metadata and content which are untrusted external inputs.
- Ingestion points: The agent ingests pull request titles, issue descriptions, and code implementations as specified in the
Requested sectionsofSKILL.md. - Boundary markers: The instructions do not define clear delimiters or specific instructions for the agent to ignore potentially malicious commands embedded within the PR text.
- Capability inventory: The skill uses the agent's reasoning and text generation capabilities to produce risk assessments and verification scenarios.
- Sanitization: There is no evidence of input sanitization or validation of the PR content before it is processed by the agent.
Audit Metadata