bagisto-code-review
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional guidelines for reviewing source code and pull requests within the Bagisto ecosystem.
- [COMMAND_EXECUTION]: The instructions suggest running standard local development tools such as
pint,pest, andphp artisanto automate parts of the review process. These are project-specific commands and do not involve remote code execution or unauthorized network access. - [INDIRECT_PROMPT_INJECTION]: As a code review tool, the agent will ingest untrusted code from pull requests. The skill mitigates this risk by providing a strict checklist and methodology for the agent to follow.
- Ingestion points: Pull request diffs and code changes (via standard context ingestion).
- Boundary markers: Not explicitly defined in this skill.
- Capability inventory: Subprocess calls to project-local tools (
pint,pest,artisan). - Sanitization: None specified for input data.
Audit Metadata