vibe-review
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies code changes by executing local shell commands (
git rev-parse,git diff, andgit log). These operations are used to provide necessary context to analysis sub-agents and include specific validation steps to ensure the provided reference point is valid and contains changes.\n- [SAFE]: The skill operates under a strict read-only policy, explicitly prohibiting actions that modify the repository, update issue trackers, or post external comments. While the skill processes external data (diffs and specifications) which presents a surface for indirect prompt injection, this risk is mitigated by the restricted sub-agent briefs and the lack of high-privilege write capabilities. The skill validates git references before execution, ensuring the tool operates within a known-good state.
Audit Metadata