opentelemetry-go-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data in the form of code diffs and patches.
- Ingestion points: The skill defines a workflow for identifying and reading specific review ranges and repository documentation (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters used to separate the external code content from the agent's core instructions.
- Capability inventory: The skill's output is limited to text-based findings and lacks capabilities for file system modification or network exfiltration (agents/openai.yaml).
- Sanitization: No specific filtering or sanitization logic is implemented for the data being reviewed.
Audit Metadata