code-review-checklist
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional markdown providing guidelines and checklists for developers conducting code reviews. It does not contain any executable scripts, shell commands, or tool invocations.
- [CREDENTIALS_UNSAFE]: While the skill contains a string matching a secret pattern (
sk_live_abc123xyz), it is explicitly used within an educational example titled 'Bad - Hardcoded secret' to demonstrate a practice that should be avoided. This is a dummy value for documentation purposes and does not represent a credential leak.
- [DATA_EXPOSURE]: The skill provides recommendations for identifying data exposure in code reviews, such as protecting sensitive data and using environment variables for secrets, which promotes security best practices.
Audit Metadata