qe-github-code-review
Fail
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill's example webhook handler (webhook-handler.js) uses
execSyncto execute shell commands using unvalidated strings from Pull Request comments. An attacker can use shell metacharacters (e.g.,;,&,|) in a PR comment starting with/swarmto execute arbitrary commands on the host system. - [REMOTE_CODE_EXECUTION]: This vulnerability enables remote code execution through the processing of untrusted external data. Evidence Chain for Category 8 logic: 1. Ingestion points:
event.comment.bodyinwebhook-handler.js. 2. Boundary markers: Absent; the code only checks for a prefix but does not sanitize the remainder of the payload. 3. Capability inventory: Spawning subprocesses viaexecSyncwith access toghCLI and potentially sensitive environment variables likeGITHUB_TOKEN. 4. Sanitization: Completely absent. - [EXTERNAL_DOWNLOADS]: The skill relies extensively on
npxto download and execute theruv-swarmpackage at runtime. This package is an external dependency from an unverified source, introducing a supply chain risk.
Recommendations
- AI detected serious security threats
Audit Metadata