stage-cli-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
stagereviewpackage globally via npm or run it directly using npx. These are legitimate installation methods for the vendor's tool. - [COMMAND_EXECUTION]: The skill executes various git commands (
git status,git add,git rev-parse) and thestage-chapterscommand to analyze the repository state and organize changes for review. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by design, as its primary function is to ingest and analyze local source code changes.
- Ingestion points: Local code diffs and file content are read from the git repository by the
stage-chapterscommand. - Boundary markers: The instructions do not define specific markers to separate reviewed code from agent instructions, though this is expected for a code review tool.
- Capability inventory: The agent has access to shell execution and repository management tools.
- Sanitization: No specific sanitization of the code content is mentioned before it is presented to the agent for analysis.
Audit Metadata