iterate-pr
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke the GitHub CLI (gh) for fetching PR status, check logs, and review comments. This is the intended primary purpose of the skill and is performed using standard programmatic patterns. - [COMMAND_EXECUTION]: The skill executes
gitandghcommands for committing changes and watching PR checks as part of the automated iteration workflow defined inSKILL.md. - [SAFE]: The scripts use
uv runfor execution, ensuring a reproducible Python environment. The logic includes specific classification for 'review bots' (e.g., Sentry, CodeQL) to ensure security and quality findings are not silenced, while informational bots (e.g., Codecov) are correctly ignored.
Audit Metadata