review-engine
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted Ruby source code and migration files, creating a surface for indirect prompt injection attacks.
- Ingestion points: Files located in the engine's
lib/,app/,db/migrate/, andspec/dummy/directories. - Boundary markers: The skill instructions do not define boundary markers or explicit safety instructions to prevent the agent from following directions embedded in the code it reviews.
- Capability inventory: The skill employs search tools like
grepand directory checks viatestto perform its analysis. - Sanitization: There is no implementation of content sanitization or filtering for the external code data processed by the agent.
Audit Metadata