code-review
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill ingests data from pull request diffs (
gh pr diff), pull request metadata and comments (gh pr view), and repository-level guidance files such asAGENTS.md,CLAUDE.md, and contribution docs (File:SKILL.md). - Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions when processing diffs or guideline files.
- Capability inventory: The skill has the ability to post comments to GitHub repositories (
gh pr comment), read local file history (git blame), and access repository metadata. - Sanitization: The instructions do not specify any sanitization, validation, or escaping of the content retrieved from the PRs or repository files before it is processed by the AI.
Audit Metadata