ably-review
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official error code definitions from Ably's documentation site at
https://ably.com/docs/platform/errors/codesto validate error hints. - [EXTERNAL_DOWNLOADS]: Instructs the environment to install the
typescript-language-serverandtypescriptpackages from the npm registry if they are not already present. - [COMMAND_EXECUTION]: Executes shell commands including
git diffandgit logto identify changes, andnpm installfor setting up required language server dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data in the form of branch code changes, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Modified source code files, git diff outputs, and git log history (SKILL.md Step 1 and Step 3).
- Boundary markers: None specified to prevent the agent from following instructions embedded within the code it is reviewing.
- Capability inventory:
npm install(Step 0),gitcommands (Step 1),WebFetchfor external URLs (Step 3), andLSPstructural analysis (Step 3). - Sanitization: No explicit sanitization or filtering is performed on the code content before it is processed by the agent.
Audit Metadata