correctness-review
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is intended to process untrusted code diffs and source files, which could potentially contain malicious instructions embedded in comments or data.
- Ingestion points: Processes code diffs and surrounding source files as described in the SKILL.md workflow.
- Boundary markers: The instructions lack explicit requirements for using delimiters or "ignore instructions" wrappers when processing external code content.
- Capability inventory: The workflow involves "fan out fast-tier readers" to analyze independent questions, which implies delegating tasks to other agent instances or tools.
- Sanitization: No sanitization or validation of the input code is specified before analysis.
Audit Metadata