thermo-nuclear-code-quality-review
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and YAML metadata. No shell scripts, binaries, or active command-line instructions are included in the package.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external codebases and diffs. This ingestion of untrusted data constitutes an attack surface for indirect prompt injection if the code under review contains malicious instructions. However, the skill is explicitly scoped for 'review-only' purposes, returning findings rather than executing code or performing automated edits, which significantly limits potential impact.
Audit Metadata