cursor-get-pr-comments
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from pull request review comments.
- Ingestion points: Review and discussion comments fetched from the active PR as described in the SKILL.md workflow.
- Boundary markers: No explicit markers or instructions are provided to the agent to treat external content as untrusted data or to ignore embedded commands.
- Capability inventory: The skill utilizes the agent's ability to fetch external text and perform summarization and prioritization based on that content.
- Sanitization: The skill does not define any sanitization, filtering, or validation steps for the retrieved PR comments.
Audit Metadata