review-verify
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for the project's verification gate (type-checking, tests, and builds) and to run CLI tools, endpoints, or functions to observe their output.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of code diffs or file paths and is instructed to execute the logic contained within. This creates an attack surface where malicious content in the code could attempt to influence the agent's behavior during the review process.
- Ingestion points: The skill ingests the diff or file path/glob passed by the caller as specified in the Scope section of SKILL.md.
- Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions in the ingested code are present.
- Capability inventory: The skill has the capability to run local shell commands, tests, and build processes.
- Sanitization: There is no evidence of sanitization or filtering of the ingested code or the resulting command output before processing.
Audit Metadata