security-review
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides methodology and checklists for performing security audits on code changes. No malicious intent, obfuscation, or insecure command execution patterns were detected in the instructions.
- [NO_CODE]: The skill does not include any scripts, executable code, or direct tool invocation logic.
- [PROMPT_INJECTION]: The skill provides a methodology for analyzing untrusted external code, which constitutes an indirect prompt injection surface.
- Ingestion points: The skill analyzes changed files, git diffs, and dependency lists (SKILL.md).
- Boundary markers: Absent; the instructions do not specify the use of delimiters when reading external content.
- Capability inventory: The skill involves reading file contents for audit purposes.
- Sanitization: No explicit sanitization or input validation instructions are provided for the content being reviewed.
Audit Metadata