review
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any executable scripts, binaries, or code files.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for reviewing external data such as code diffs, branches, and project documentation, which constitutes an indirect prompt injection surface.
- Ingestion points: The instructions guide the agent to read
AGENTS.md, branch diffs, and files withindocs/development/. - Boundary markers: None identified; the instructions do not specify the use of delimiters or specific safety warnings for the data being reviewed.
- Capability inventory: The instruction to "Review the actual source and live output" implies the use of file system access and potentially runtime evaluation tools, though no specific tools are explicitly listed or restricted in the frontmatter.
- Sanitization: No explicit sanitization or filtering of input content is described in the review process.
Audit Metadata