typescript-review
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a specialized code review workflow that analyzes code changes and produces a report. It does not perform any network operations, ensuring that the code it processes is not exfiltrated.
- [COMMAND_EXECUTION]: The skill utilizes
git diffto access the code changes andmkdirto create a temporary directory for the report. These commands are necessary for its core functionality and are used in a non-malicious context. - [PROMPT_INJECTION]: The skill includes instructions to ignore the content of the code being reviewed in terms of instruction following, focusing only on the code's style and logic. While it processes untrusted data (the code diff), the workflow is designed to output a read-only report rather than execute instructions found within the code.
Audit Metadata