ddd-code-reviewer

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several external documentation sources including Microsoft Learn, Martin Fowler's blog, and Clean Coder. These are well-known, trusted technical resources used for educational purposes.
  • [COMMAND_EXECUTION]: The file references/06-gotchas.md includes local shell commands (primarily grep and simple for/while loops) designed to help developers identify anti-patterns in their codebase. These commands operate locally on the source code and do not involve network operations or privilege escalation.
  • [REMOTE_CODE_EXECUTION]: The skill provides configuration snippets for ArchUnit in references/01-archunit-config.md. It references the legitimate and well-known Java library com.tngtech.archunit. The instructions are for the user to manually include these in their project's test suite for automated architecture validation.
  • [DATA_EXFILTRATION]: No network exfiltration patterns were detected. All code snippets and instructions are focused on static analysis of provided source code to generate a markdown review report.
  • [PROMPT_INJECTION]: The skill is intended to process user-provided code fragments for review. While this constitutes an indirect ingestion surface for external data, the skill's capabilities are limited to generating structured text reports. There are no tools or instructions that would allow embedded code instructions to execute dangerous operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:12 AM
Security Audit — agent-trust-hub — ddd-code-reviewer