pr-info
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious code, obfuscation, or data exfiltration patterns were detected. The skill follows best practices for repository interaction by dynamically detecting the repository context.
- [COMMAND_EXECUTION]: The skill uses shell commands and a local helper script (~/.claude/scripts/gh-pr-info.sh) to interact with the GitHub CLI. These operations are limited to the skill's intended purpose of reading Pull Request data.
- [DATA_EXPOSURE]: The skill accesses GitHub metadata and PR content (reviews and comments). This involves reading external data which represents a standard surface for indirect prompt injection, however, no malicious instructions or bypass attempts were found.
Audit Metadata