thermo-nuclear-code-quality-review
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze external code changes, creating a surface for indirect prompt injection where malicious instructions embedded in the code being reviewed could attempt to influence the agent's output.
- Ingestion points: The skill explicitly reads and audits branch changes and source code content.
- Boundary markers: There are no explicit instructions to wrap the code being reviewed in delimiters or to ignore potential instructions within that code.
- Capability inventory: The skill is restricted via its frontmatter (
disable-model-invocation: true) and lacks access to network or file-writing tools, which mitigates the impact of potential injections. - Sanitization: The skill does not implement any validation or sanitization of the input code before processing it.
Audit Metadata