skills/i9wa4/dotfiles/subagent-review/Gen Agent Trust Hub

subagent-review

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external code and review packets, which creates a potential surface for indirect injection.
  • Ingestion points: Repository files under review and response packets from sub-agent critics, as defined in references/review-topology.md.
  • Boundary markers: The workflow uses 'blind projections' and 'packet aliases' to hide real repository paths and context from sub-agents.
  • Capability inventory: The process involves reading file contents, aggregating peer evidence, and recording substantive findings in a central ledger.
  • Sanitization: Instructions explicitly mandate the removal of identity-bearing metadata, diff headers, and session lineage before data is shared with reviewers.
  • [SAFE]: The skill focuses on security best practices, including data isolation, audit trails, and strict constraints on sub-agent behavior to prevent unauthorized actions like code implementation or public posting.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 06:43 AM