skills/chann/skills/code-review-html/Gen Agent Trust Hub

code-review-html

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (generate_html_report.py) to convert markdown review reports into HTML format. It also uses the open command to display the generated HTML file to the user.
  • [PROMPT_INJECTION]: The skill processes untrusted external data in the form of code diffs (git diff). This creates an indirect prompt injection surface where malicious repository content could attempt to influence the agent's analysis. No specific instructions to bypass safety or override behavior were found.
  • [DATA_EXFILTRATION]: The skill accesses local repository data for analysis purposes. No network operations, external connections, or unauthorized data transmissions were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 01:12 PM