review-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external diffs which are a source of untrusted data and could contain malicious instructions or adversarial content.
- Ingestion points: The skill instructions in
SKILL.mdexplicitly direct the agent to "Read the full selected diff and directly affected paths." - Boundary markers: There are no explicit delimiters or instructions to the agent to treat the diff content purely as data or to ignore embedded instructions within code comments.
- Capability inventory: The skill is restricted to read-only operations and explicitly forbids editing, fixing, or committing code ("Stay read-only; do not edit reviewed files, apply fixes, commit, or publish without authority"), which significantly limits the potential impact of an injection.
- Sanitization: No sanitization, escaping, or filtering of the diff content is specified before it is processed by the agent.
Audit Metadata