compose-preview-review

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches and executes a shell script directly from the author's repository to set up necessary CLI tools.
  • Evidence: curl -fsSL https://raw.githubusercontent.com/yschimke/skills/main/scripts/install.sh | bash in SKILL.md.
  • [COMMAND_EXECUTION]: The skill and its internal validation scripts execute various shell commands to manage worktrees, render UI previews, and perform automated audits.
  • Evidence: Usage of subprocess.run() in scripts/run-agent-audit-samples.py to orchestrate tool execution.
  • Evidence: Instructions in SKILL.md and references/agent-pr.md directing the agent to use gh, git, and compose-preview for PR reviews.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 03:32 AM