review-comment
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from GitHub pull request metadata (body, comments, reviews), issue descriptions, and source code diffs.
- Ingestion points: Pull request details and issue content are fetched using
gh pr viewandgh issue viewcommands as described in Step 1. - Boundary markers: The instructions lack explicit delimiters or specific directives for the agent to isolate untrusted content from the skill's own operational logic.
- Capability inventory: The agent can execute shell commands for testing (Step 3) and perform network-based actions such as
gh pr commentandgh pr review(Step 7). - Sanitization: No specific validation or sanitization routines are defined for data ingested from pull requests before it is processed or interpolated into review drafts.
- [COMMAND_EXECUTION]: The skill extensively utilizes command-line interfaces to interact with the repository and environment.
- Uses
git fetch,git worktree, andghtools to manage and inspect pull request data. - Executes
yarn install,yarn build,yarn mocha, andyarn jestto build and test code changes directly from pull request branches. - Employs
rg --hiddenfor searching repository content andpnpm kbfor project-specific testing. - [EXTERNAL_DOWNLOADS]: The skill fetches code and metadata from external GitHub repositories.
- Downloads pull request head branches from the
ianstormtaylor/slateandudecode/platerepositories on GitHub to perform local analysis and testing. - [REMOTE_CODE_EXECUTION]: The skill retrieves code from external pull request heads and executes it locally using test runners.
- Fetches content from remote branches and runs
yarn mochaoryarn jeston that code in a detached worktree to verify findings. - [DYNAMIC_EXECUTION]: The skill involves the runtime execution of tests and potentially scripts associated with external pull requests.
- Uses
yarnandmocha/jestto execute test files retrieved from pull requests, which can involve running arbitrary code defined by the PR author.
Audit Metadata