review
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a logical framework for review orchestration and does not include any executable scripts, network requests, or unauthorized file system operations.
- [SAFE]: No obfuscation, hardcoded credentials, or persistence mechanisms were detected in the skill instructions.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests and processes untrusted data from external sources.
- Ingestion points: Processes
git diffoutput andplan/specfiles. - Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the analyzed code diffs.
- Capability inventory: Restricted to text-based analysis and dispatching to other review tools within the agent environment.
- Sanitization: No filtering or escaping is applied to the ingested data before it is presented to the agent for analysis.
Audit Metadata