skills/google/adk-python/adk-review/Gen Agent Trust Hub

adk-review

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill uses shell commands like git status, git diff, pytest, and pre-commit to perform its review and testing tasks. This is a core capability that allows the agent to interact with the local file system and execution environment.
  • Indirect Prompt Injection: The skill analyzes uncommitted code changes, which could potentially contain embedded instructions intended to manipulate the agent's review.
  • Ingestion points: Data enters the context via the git diff workflow in SKILL.md.
  • Boundary markers: There are no specified delimiters used to separate the ingested code from the agent's instructions.
  • Capability inventory: The agent has the ability to run shell commands and modify local files.
  • Sanitization: The skill does not explicitly sanitize the contents of the code diffs before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 05:44 AM