glm-review
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands using the
opencodeCLI tool to verify model availability (opencode models), debug settings (opencode debug config), and invoke the AI model (opencode run).- [EXTERNAL_DOWNLOADS]: The skill references and links to documentation onopencode.aifor configuration and permission guidelines. It also interacts with remote AI models via the Z.AI Coding Plan.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and review code from a repository, which is a potential surface for indirect prompt injection if the files contain malicious instructions. The skill proactively mitigates this risk by instructing the agent to treat output as 'leads' and verify all material claims against the source before taking action.- [DYNAMIC_EXECUTION]: The instructions provide a pattern for using Python'ssubprocess.Popento manage process execution, process groups, and timeouts for the CLI tool.
Audit Metadata