synthesise-reviews
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external review reports which may contain instructions designed to manipulate the synthesis logic.\n
- Ingestion points: Reads review files from the
reviews/directory andcomment-tracker.mdin the project structure.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when parsing input files.\n
- Capability inventory: The skill utilizes
Read,Write,Edit,Glob, andGreptools. It does not have access to tools for network communication or arbitrary code execution.\n - Sanitization: No specific sanitization, filtering, or validation of the text content extracted from the reports is described in the workflow.
Audit Metadata