pr-review-agent
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
git,gh, and the vendor-specificwednesday-skillsCLI to interact with repositories and perform code analysis (score, blast radius, and drift detection). - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted data from external PR comments.
- Ingestion points:
gh pr view --comments(SKILL.md). - Boundary markers: Absent; there are no specific instructions or delimiters provided to help the agent distinguish between its core instructions and potentially malicious instructions embedded in the fetched comments.
- Capability inventory: The agent has bash execution permissions (
git,gh,wednesday-skills) and instructions to modify code and commit changes during thetriage-fixstage. - Sanitization: No evidence of sanitization, filtering, or validation of the comment data before it is presented to the user or used to guide fixes.
Audit Metadata