branch-review-before-pr
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from
git diffoutputs as described inSKILL.md. Boundary markers for the diff content are absent. However, the capability to modify files is strictly gated behind a human-in-the-loop process usingAskUserQuestion. No sanitization is performed on the diff data, but the agent's actions are restricted to those explicitly approved by the user. - [COMMAND_EXECUTION]: The skill uses
git fetch,git diff, andgit branchcommands to perform its review. These commands are standard for repository analysis and do not involve executing external or untrusted code.
Audit Metadata