code-review
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for the agent to execute standard development commands, such as
git diff,cargo test, andnpm test, to verify code quality and project status. These are routine operations for the intended purpose of code review. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external source code (Rust, TypeScript, React). This creates an attack surface where instructions embedded in the analyzed code could potentially influence agent behavior. The instructions do not currently include explicit sanitization or boundary markers for this untrusted input.
- Ingestion points: Source code files provided by the user or project environment (
.rs,.ts,.tsx). - Boundary markers: None identified in the provided instructions.
- Capability inventory: Execution of shell commands via
git,cargo, andnpm. - Sanitization: No specific sanitization or escaping of the ingested code content is mentioned.
Audit Metadata