secure-code-review
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external source code, which serves as a surface for indirect prompt injection where malicious instructions could be embedded in the data being processed.
- Ingestion points: Reads source code files using the
codebaseandfilesystemtools (SKILL.md). - Boundary markers: Absent; there are no instructions provided to the agent to ignore instructions that might be contained within the code files it analyzes.
- Capability inventory: Access to the
codebaseandfilesystemtools for file operations (SKILL.md). - Sanitization: Absent; the skill does not perform sanitization of the input files before analysis.
Audit Metadata