local-code-review

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to identify code changes and run static analysis tools. Specifically, it executes git diff to scope the review and runs package-specific commands like npm run lint, npx tsc, and ruff check. These operations are well-defined and essential for the skill's stated purpose of reviewing and auditing code.- [SAFE]: The skill incorporates a robust security scanning phase (Step 6) that instructs the agent to check for critical vulnerabilities, including hardcoded secrets, SQL/Command injection, XSS vectors, and insecure deserialization. This proactive approach improves the security posture of the project being reviewed.- [SAFE]: No remote code execution from untrusted sources, data exfiltration to external domains, or persistence mechanisms were detected. The skill operates locally on the project files provided by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 06:39 PM