local-review
Fail
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill automatically executes
make -C WORKTREE setupwithin a newly created worktree containing code fetched from an external GitHub branch. This allows a malicious branch author to execute arbitrary code on the reviewer's machine via the Makefile. - [COMMAND_EXECUTION]: The skill performs multiple shell operations including
git remote add,git fetch,git worktree add, andcp, using parameters extracted directly from user-provided strings (e.g.,gh_username:branchName). - [EXTERNAL_DOWNLOADS]: The instructions command the agent to add new git remotes and fetch data from arbitrary GitHub user accounts (
git@github.com:USERNAME/humanlayer), which results in downloading untrusted code into the local environment. - [CREDENTIALS_UNSAFE]: The skill copies local configuration files (
.claude/settings.local.json) into the newly created worktree. If the external branch being reviewed contains malicious scripts or hooks, these sensitive settings could be accessed or exposed.
Recommendations
- AI detected serious security threats
Audit Metadata