ci-formats-review
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill instructions are limited to verifying the correctness and compatibility of machine-consumed CI reports without invoking external scripts or performing network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill reviews data from machine-consumed reports (SARIF, CodeClimate) which may originate from untrusted sources. Ingestion points: CI report files in various formats. Boundary markers: None present in SKILL.md. Capability inventory: No execution capabilities or file-write operations are defined. Sanitization: No explicit sanitization of input data is defined. This represents a standard surface for indirect prompt injection with no associated high-risk capabilities.
Audit Metadata