ha-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform shell-based operations using git to resolve branch references and retrieve code differences. Specifically, it uses
git merge-baseandgit diffto identify the changes requiring review. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data in the form of code changes from potentially external contributors. It lacks specific boundary markers or instructions to the agent to disregard instructions that might be embedded within code comments or documentation files being reviewed.
- Ingestion points: Code changes retrieved via
git diffand the content of thequality_scale.yamlfile. - Boundary markers: The skill does not provide delimiters or "ignore embedded instructions" warnings for the content it analyzes.
- Capability inventory: The skill has the capability to spawn up to 10 parallel subagents and invoke the
ha-quality-scale-verifyskill to perform further analysis based on the ingested content. - Sanitization: No evidence of sanitization or filtering of the external code content before analysis is provided.
Audit Metadata