compose-preview-review
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches and executes a shell script directly from the author's repository to set up necessary CLI tools.
- Evidence:
curl -fsSL https://raw.githubusercontent.com/yschimke/skills/main/scripts/install.sh | bashinSKILL.md. - [COMMAND_EXECUTION]: The skill and its internal validation scripts execute various shell commands to manage worktrees, render UI previews, and perform automated audits.
- Evidence: Usage of
subprocess.run()inscripts/run-agent-audit-samples.pyto orchestrate tool execution. - Evidence: Instructions in
SKILL.mdandreferences/agent-pr.mddirecting the agent to usegh,git, andcompose-previewfor PR reviews.
Audit Metadata