code-review-html
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
generate_html_report.py) to convert markdown review reports into HTML format. It also uses theopencommand to display the generated HTML file to the user. - [PROMPT_INJECTION]: The skill processes untrusted external data in the form of code diffs (
git diff). This creates an indirect prompt injection surface where malicious repository content could attempt to influence the agent's analysis. No specific instructions to bypass safety or override behavior were found. - [DATA_EXFILTRATION]: The skill accesses local repository data for analysis purposes. No network operations, external connections, or unauthorized data transmissions were identified.
Audit Metadata