code-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed entirely of instructional markdown. It does not contain any executable scripts (.sh, .py, .js), hardcoded credentials, or shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted external data in the form of source code and project files, which constitutes a standard attack surface for indirect prompt injection.
- Ingestion points: The instructions direct the agent to read committed, staged, unstaged, and new files, along with configuration and tests in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the code being reviewed.
- Capability inventory: The instructions suggest running tests or missing checks, which would utilize the agent's available environment tools rather than custom scripts within the skill.
- Sanitization: There are no explicit instructions for sanitizing or escaping the content of the files under review.
Audit Metadata