review-pr
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate repository analysis using standard git commands and specialized internal tools. No malicious behavior, unauthorized data access, or suspicious network activity was detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes pull request content from external sources, which is an untrusted data input. This constitutes a potential surface for indirect prompt injection. However, as this is the primary function of a code review tool, it is categorized as a low-risk inherent characteristic of the task.
Audit Metadata