security-files-integrations-review
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external content such as pull requests and source code, which could potentially harbor malicious instructions.
- Ingestion points: The process involves inspecting code changes, data flows, and pull request content (as defined in
SKILL.mdandreferences/01-files-and-integrations.md). - Boundary markers: The skill instructions do not explicitly define specific delimiters or instructions for the agent to ignore embedded commands within the code it reviews.
- Capability inventory: Based on the provided files, the skill's actions are limited to reviewing, reporting, and recommending security controls, with no evidence of dangerous tool execution or file system write capabilities.
- Sanitization: There are no specific sanitization or filtering steps mentioned for the untrusted data being processed.
- [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration files. No executable scripts (Python, JavaScript, etc.) are included in the skill package.
Audit Metadata