code-review-and-quality
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of high-quality markdown instructions and checklists designed to guide an AI agent through a code review process. It does not contain any executable code, shell commands, or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of code diffs and pull requests. While this creates a surface for indirect prompt injection, the skill's instructions prioritize identifying security vulnerabilities in that data, and the agent lacks the capabilities (such as file-writing or network access) that would make such an injection exploitable. The risk is inherent to the skill's primary purpose and is addressed through safe handling instructions.
Audit Metadata