dsh-code-review
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local repository script using
pnpm --silent run change-scope. This is used to calculate the scope of changes between two verified git references and is standard for repository-specific tooling. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze Pull Request diffs, which constitutes processing untrusted external data.
- Ingestion points: Pull Request diffs, repository source files, and documentation.
- Boundary markers: The instructions emphasize the use of verified base and head references.
- Capability inventory: Local shell execution of project-defined scripts via
pnpm. - Sanitization: No explicit content sanitization is defined for the PR diffs, as the skill's purpose is human-in-the-loop or agentic semantic review.
Audit Metadata