requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local
gitcommands (rev-parse, diff, show, worktree) to manage and inspect code versions. These operations are standard for development workflows and are used here to provide context to a subagent. - [INDIRECT_PROMPT_INJECTION]: Because the subagent is instructed to read and analyze code changes, there is a theoretical risk of indirect prompt injection if the code being reviewed contains malicious instructions (e.g., in comments) designed to deceive the reviewer. This is an inherent risk for any tool that processes untrusted text via an LLM.
Audit Metadata