local-code-review
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to identify code changes and run static analysis tools. Specifically, it executes
git diffto scope the review and runs package-specific commands likenpm run lint,npx tsc, andruff check. These operations are well-defined and essential for the skill's stated purpose of reviewing and auditing code.- [SAFE]: The skill incorporates a robust security scanning phase (Step 6) that instructs the agent to check for critical vulnerabilities, including hardcoded secrets, SQL/Command injection, XSS vectors, and insecure deserialization. This proactive approach improves the security posture of the project being reviewed.- [SAFE]: No remote code execution from untrusted sources, data exfiltration to external domains, or persistence mechanisms were detected. The skill operates locally on the project files provided by the user.
Audit Metadata