review

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements a logical framework for review orchestration and does not include any executable scripts, network requests, or unauthorized file system operations.
  • [SAFE]: No obfuscation, hardcoded credentials, or persistence mechanisms were detected in the skill instructions.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests and processes untrusted data from external sources.
  • Ingestion points: Processes git diff output and plan/spec files.
  • Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the analyzed code diffs.
  • Capability inventory: Restricted to text-based analysis and dispatching to other review tools within the agent environment.
  • Sanitization: No filtering or escaping is applied to the ingested data before it is presented to the agent for analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 05:40 PM