review-security
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed exclusively of markdown instructions and checklist items for conducting a manual security audit. It does not contain any executable scripts, binaries, or automated tool configurations.
- [NO_CODE]: No source code (Python, JavaScript, shell scripts) is included in the skill. The logic is entirely expressed in natural language instructions for the agent.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted code changes. 1. Ingestion points: Input is defined in SKILL.md as the diff or path/glob the caller passes. 2. Boundary markers: Absent; no specific delimiters or instructions to ignore embedded instructions are present. 3. Capability inventory: None; the skill does not request access to tools or include scripts with executable, file-system, or network capabilities. 4. Sanitization: Absent; no specific filtering or escaping mechanisms are defined for the input data.
Audit Metadata