address-review
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gh(GitHub CLI) tool within a Bash environment to perform API calls. It usesgh apito fetch pull request comments and post replies, and usesjqto parse the resulting JSON data. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from an untrusted source (arbitrary comments on a GitHub PR).
- Ingestion points: Fetches unreplied line-specific and general PR comments via
gh apiandjqfilters. - Boundary markers: No technical delimiters or 'ignore' instructions are used to wrap the ingested comment text.
- Capability inventory: The agent is granted
EditandBashcapabilities, which allow it to modify the codebase and commit/push changes based on the evaluated comments. - Sanitization: There is no programmatic sanitization of comment content; the skill relies on the AI agent's instruction to 'critically evaluate' whether a suggestion is valid before implementation.
Audit Metadata