review-quality
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Web Interface Guidelines from Vercel Labs' official GitHub repository using WebFetch or curl.
- [INDIRECT_PROMPT_INJECTION]: Ingests untrusted data from git diffs, implementation plans, and documentation which may contain malicious instructions targeting the agent's review logic.
- Ingestion points: Git diff outputs, feature plans, and documentation files (SKILL.md, references/code-reviewer.md).
- Boundary markers: The skill does not define specific delimiters or warnings to ignore instructions embedded in the code being reviewed.
- Capability inventory: Execution of git commands, network fetching via curl, and file writing to the run directory (SKILL.md).
- Sanitization: No sanitization of the processed code or diff content is specified.
- [COMMAND_EXECUTION]: Utilizes git commands (git diff, git rev-parse, git merge-base) to analyze changes between branches and commits.
Audit Metadata