skills/dungsil/skills/vibe-review/Gen Agent Trust Hub

vibe-review

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill identifies code changes by executing local shell commands (git rev-parse, git diff, and git log). These operations are used to provide necessary context to analysis sub-agents and include specific validation steps to ensure the provided reference point is valid and contains changes.\n- [SAFE]: The skill operates under a strict read-only policy, explicitly prohibiting actions that modify the repository, update issue trackers, or post external comments. While the skill processes external data (diffs and specifications) which presents a surface for indirect prompt injection, this risk is mitigated by the restricted sub-agent briefs and the lack of high-privilege write capabilities. The skill validates git references before execution, ensuring the tool operates within a known-good state.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 01:59 PM