responding-to-review-on-a-stack
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process where an agent processes and acts upon external code review comments, representing an ingestion point for untrusted data. 1. Ingestion points: External review comments on code platforms (SKILL.md). 2. Boundary markers: Absent for delimiting review content from instructions. 3. Capability inventory: Git operations including commit, merge, rebase, and push (SKILL.md). 4. Sanitization: The skill includes a defensive mandate to triage comments and verify claims against the code before execution.
Audit Metadata