implement-review-pr
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the 'gh' command-line tool to interact with GitHub Pull Requests, fetching data and submitting reviews. These are standard operations for a PR review tool.
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it ingests untrusted data from GitHub Pull Requests (titles, descriptions, and code diffs). * Ingestion points: PR metadata and code diffs retrieved via 'gh pr view' and 'gh pr diff' in SKILL.md. * Boundary markers: Missing explicit delimiters or instructions to ignore embedded commands in the processed data. * Capability inventory: Includes 'gh pr review' to post comments, approve, or request changes based on the processed data. * Sanitization: No evidence of validation or sanitization of ingested PR content before processing by the agent.
Audit Metadata