code-review
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to process external, untrusted data in the form of Pull Request source code and diffs, which serves as an ingestion point for indirect prompt injection.
- Ingestion points: Pull Request source files and git diffs processed during code review.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the code being reviewed.
- Capability inventory: The skill specifies the execution of the
pytestcommand to verify code integrity. - Sanitization: There is no mention of sanitizing or validating the external code before it is processed or tested.
- [COMMAND_EXECUTION]: The instructions direct the agent to run the
pytesttest suite (pytest tests/) to ensure changes do not break existing behavior. Executing tests on untrusted external code (from a PR) is a standard development practice but theoretically allows for arbitrary code execution if the test files or the modules they import are maliciously crafted.
Audit Metadata