pr-validate
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): No malicious patterns or security vulnerabilities detected. The skill performs branch analysis using standard Git commands like
git fetch,git log, andgit diff. - Indirect Prompt Injection (SAFE): While the skill processes untrusted data from the repository (commit messages and file paths), it does so to generate reports for the user. It does not execute this data as code, nor does it pass it to sensitive APIs. The risk is minimized as these operations are intrinsic to the skill's primary purpose of PR validation.
- Command Execution (SAFE): The skill uses shell commands for legitimate repository management (e.g.,
git rebase,git cherry-pick). These commands are triggered by the user to manage their local branch state and do not involve remote command execution or privilege escalation.
Audit Metadata