requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like git rev-parse, git log, and git diff to identify commit ranges and retrieve code for review. These are standard operations for a code review tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes implementation summaries, project requirements, and code diffs. Ingestion points: {WHAT_WAS_IMPLEMENTED}, {PLAN_OR_REQUIREMENTS}, {DESCRIPTION}, and git diff output. Boundary markers: None. Capability inventory: Subagent executes git diff. Sanitization: None. This creates a surface for indirect prompt injection if the reviewed code contains malicious instructions.
Audit Metadata