code-review-checklist
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and checklists intended to guide developers through the code review process. It does not contain any executable code, scripts, or automated tools.
- [CREDENTIALS_UNSAFE]: The skill includes an example of a hardcoded Stripe secret key (
sk_live_abc123xyz) within a code block explicitly labeled as a "Bad" practice to avoid. This is a legitimate educational use case intended to teach reviewers how to identify credential exposure, and the key itself is a dummy value. - [DATA_EXFILTRATION]: There are no commands or logic present for accessing sensitive files or transmitting data to external servers.
- [REMOTE_CODE_EXECUTION]: No remote script downloads, package installations, or dynamic code execution patterns are used in the skill.
Audit Metadata