cross-agent-review
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands
gitandghto retrieve repository metadata and pull request diffs for analysis. - [COMMAND_EXECUTION]: It invokes a local vendor script
agentTool.tsto manage interactions with external AI agents and update pull request labels. This is considered standard behavior for a development utility. - [PROMPT_INJECTION]: An indirect prompt injection surface was identified where the skill ingests pull request diffs and metadata. Evidence: 1. Ingestion points:
git diffandgh pr listin SKILL.md; 2. Boundary markers: Not present; 3. Capability inventory: PR tagging and review solicitation viaagentTool.tsin SKILL.md; 4. Sanitization: None detected. This is evaluated as safe because it is the primary intended function of the skill and does not expose dangerous capabilities.
Audit Metadata