pr
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several shell commands to interact with the local git environment and the GitHub CLI. These include
git branch,git log,git diff, andgh pr create/edit/view. These are standard tools for a pull request automation skill and are used within the scope of the described functionality. - [DATA_EXPOSURE]: The skill reads local configuration files (
.pr-config.yml,~/.config/claude-pr/config.yml) to determine issue tracker URLs and reviewer preferences. This is a standard practice for developer tools and does not involve sensitive credentials like API keys or SSH keys. - [PERSISTENCE_MECHANISMS]: The skill attempts to log execution metadata to a telemetry file in
~/.claude/projects/if the directory exists. This is used for internal 'self-evolution' metrics and does not modify shell profiles or system services for malicious persistence.
Audit Metadata