code-review
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute local shell commands, including git diff, grep, and git log, to retrieve code changes and context for analysis. These are standard operations for code review tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted content from code diffs, repository files, and CLAUDE.md configuration files, which serves as a potential vector for indirect prompt injection. 1. Ingestion points: Unified diffs from git diff, source code files, and repository CLAUDE.md files. 2. Boundary markers: No specific delimiters or warnings are used to isolate untrusted content from the agent's instructions. 3. Capability inventory: The skill utilizes shell execution and file reading capabilities. 4. Sanitization: No sanitization or filtering is performed on the ingested content.
Audit Metadata