multi-model-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references an installation command for Cursor (
curl https://cursor.com/install -fsS | bash). While this pattern (piping to shell) is often risky, it is a well-known installation method for a trusted developer tool and is presented as a setup instruction for the user, not a hidden runtime execution. - [COMMAND_EXECUTION]: The skill uses several local shell commands to facilitate its workflow, including
git rev-parse,mkdir,git diff, and invocations of installed CLIs likeclaude,codex, andagent. All operations are limited to the user's local git repository and temporary directories.
Audit Metadata