pr-review-agent

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands using git, gh, and the vendor-specific wednesday-skills CLI to interact with repositories and perform code analysis (score, blast radius, and drift detection).
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted data from external PR comments.
  • Ingestion points: gh pr view --comments (SKILL.md).
  • Boundary markers: Absent; there are no specific instructions or delimiters provided to help the agent distinguish between its core instructions and potentially malicious instructions embedded in the fetched comments.
  • Capability inventory: The agent has bash execution permissions (git, gh, wednesday-skills) and instructions to modify code and commit changes during the triage-fix stage.
  • Sanitization: No evidence of sanitization, filtering, or validation of the comment data before it is presented to the user or used to guide fixes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 08:41 PM
Security Audit — agent-trust-hub — pr-review-agent