code-review
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several bash snippets using standard Unix utilities (
grep,find,head,ls) andgit. These are used appropriately to gather architectural context, detect coding patterns, and analyze file churn within the local repository to provide informed code reviews. - [DATA_EXFILTRATION]: No network-enabled tools or commands (such as
curlorwget) are used. The skill's analysis remains entirely local to the execution environment. - [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were detected. While the skill specifically instructs the agent to look for security-sensitive paths (e.g., searching for 'auth', 'token', 'password'), this is performed as part of a legitimate security review process and the data is not sent externally.
- [PROMPT_INJECTION]: The instructions are focused on providing high-quality technical feedback and do not attempt to bypass safety filters or override the agent's core instructions.
Audit Metadata