iterate-pr

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to invoke the gh (GitHub CLI) for PR interactions. This is standard behavior for development-related tools and is used to fetch check statuses, review comments, and post replies. Evidence: scripts/fetch_pr_checks.py, scripts/fetch_pr_feedback.py, scripts/reply_to_thread.py.
  • [EXTERNAL_DOWNLOADS]: The skill requires the uv tool and gh CLI to be installed and configured on the host system. It does not perform unexpected runtime downloads from untrusted sources. Evidence: SKILL.md prerequisites section.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 01:12 PM