iterate-pr Audit report.

Warnings

• Permission surface may require sandboxing
• The skill relies on `gh` and `uv` being installed and authenticated, which is clearly stated but could be a barrier in some environments.
• The workflow instructs the agent to push commits and reply to threads, which requires appropriate permissions; this is expected but should be used with caution in untrusted repositories.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.