self-review
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's review workflow introduces a surface for indirect prompt injection where malicious instructions could be embedded in the content under review.
- Ingestion points: The agent ingests 'the work under review', 'repository context', and 'specifications' from external sources as described in SKILL.md.
- Boundary markers: No specific delimiters or boundary markers are instructed to be used when preparing the review packet for the secondary agent.
- Capability inventory: The workflow relies on the ability to 'dispatch independent agents', which can potentially execute tools or commands.
- Sanitization: The guidelines do not include steps for sanitizing, escaping, or validating the input data before it is processed by the reviewer agent.
Audit Metadata