iterate-pr
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke thegh(GitHub CLI) for PR interactions. This is standard behavior for development-related tools and is used to fetch check statuses, review comments, and post replies. Evidence:scripts/fetch_pr_checks.py,scripts/fetch_pr_feedback.py,scripts/reply_to_thread.py. - [EXTERNAL_DOWNLOADS]: The skill requires the
uvtool andghCLI to be installed and configured on the host system. It does not perform unexpected runtime downloads from untrusted sources. Evidence:SKILL.mdprerequisites section.
Audit Metadata