pr-triage
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external GitHub pull requests, including titles, bodies, and file content. This creates a surface for indirect prompt injection where malicious instructions in a PR could attempt to bias the agent's classification or review logic.- [SAFE]: All external references and interactions target the
toss/es-toolkitrepository. Astossis a recognized organization, these references are considered safe. The use of standard development tools likeyarnandghfor testing and benchmarking is consistent with the skill's stated purpose.
Audit Metadata