caveman-review
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data in the form of code diffs and pull request descriptions. \n
- Ingestion points: Pull request diffs and user commands referenced in the instructions (e.g., 'review this PR', '/review').\n
- Boundary markers: The skill does not define specific delimiters to isolate external code content from review instructions.\n
- Capability inventory: None. The skill consists only of instructions and does not include any scripts or request access to tools for file modification, network access, or command execution.\n
- Sanitization: No sanitization or filtering of external code content is described.\n- [NO_CODE]: The skill consists entirely of markdown instructions and does not provide any executable scripts, binaries, or configuration files.
Audit Metadata