harness-review
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to rungit difffor gathering source code changes and executes a local bash scriptscripts/review-ai-residuals.shto scan for potential security vulnerabilities and temporary code artifacts. These operations are consistent with its primary function as a review tool.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) due to its processing of untrusted external content. - Ingestion points: Analyzes data directly from
git diffoutput and thePlans.mdfile. - Boundary markers: No specific delimiters or safety instructions are defined to separate untrusted code/text from the agent's internal instructions.
- Capability inventory: The skill has access to powerful tools including
Bash,Task,Read,Grep, andGlob. - Sanitization: No logic is provided to sanitize or validate the content of the reviewed data before it is processed by the AI.
Audit Metadata