adk-review
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill uses shell commands like
git status,git diff,pytest, andpre-committo perform its review and testing tasks. This is a core capability that allows the agent to interact with the local file system and execution environment. - Indirect Prompt Injection: The skill analyzes uncommitted code changes, which could potentially contain embedded instructions intended to manipulate the agent's review.
- Ingestion points: Data enters the context via the
git diffworkflow inSKILL.md. - Boundary markers: There are no specified delimiters used to separate the ingested code from the agent's instructions.
- Capability inventory: The agent has the ability to run shell commands and modify local files.
- Sanitization: The skill does not explicitly sanitize the contents of the code diffs before processing.
Audit Metadata