ddd-code-reviewer
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external documentation sources including Microsoft Learn, Martin Fowler's blog, and Clean Coder. These are well-known, trusted technical resources used for educational purposes.
- [COMMAND_EXECUTION]: The file
references/06-gotchas.mdincludes local shell commands (primarilygrepand simplefor/whileloops) designed to help developers identify anti-patterns in their codebase. These commands operate locally on the source code and do not involve network operations or privilege escalation. - [REMOTE_CODE_EXECUTION]: The skill provides configuration snippets for ArchUnit in
references/01-archunit-config.md. It references the legitimate and well-known Java librarycom.tngtech.archunit. The instructions are for the user to manually include these in their project's test suite for automated architecture validation. - [DATA_EXFILTRATION]: No network exfiltration patterns were detected. All code snippets and instructions are focused on static analysis of provided source code to generate a markdown review report.
- [PROMPT_INJECTION]: The skill is intended to process user-provided code fragments for review. While this constitutes an indirect ingestion surface for external data, the skill's capabilities are limited to generating structured text reports. There are no tools or instructions that would allow embedded code instructions to execute dangerous operations.
Audit Metadata