code-review

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) to retrieve pull request information and verify the user's authentication status.
  • Evidence: gh pr view and gh auth status commands listed in the Error Handling section of SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as an analysis engine for untrusted external content, creating a surface for indirect prompt injection attacks where code being reviewed could influence the agent's behavior.
  • Ingestion points: The skill instructions require the agent to 'Analyze the diff and pre-loaded PR context' and 'Read changed files to understand full context' (SKILL.md).
  • Boundary markers: The skill does not provide specific instructions or delimiters to ensure the agent distinguishes between the developer's instructions and the content of the files being reviewed.
  • Capability inventory: The skill has the capability to read any file in the repository and execute GitHub CLI commands.
  • Sanitization: There is no logic provided to sanitize or filter the content of the pull request or the source files before processing them.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 02:28 PM
Security Audit — agent-trust-hub — code-review