Review Pr

• Outcome: Review
• Latest audit: May 29, 2026 at 9:23 PM UTC
• Version:
  1.0.0

Overview

This skill fits its PR-review purpose, but it can publish a Gitee PR comment through the user's MCP account without first requiring approval.

Install only if you are comfortable letting the skill use your configured Gitee MCP account to read pull request data and post review comments. Ask the agent to draft the review in chat first, confirm the exact repository and PR number, and approve the final text before allowing `comment_pull`.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill directs the agent to use `comment_pull` to post review results to the PR, but it does not clearly require user confirmation before performing this externally visible write action. In practice, this can cause unintended public or team-visible comments, potentially disclosing internal analysis, mistaken findings, or sensitive context gathered during review.

VirusTotal

66/66 vendors flagged this skill as clean.