code-review-web
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for analyzing untrusted frontend source code, including HTML, CSS, JavaScript, and TypeScript. This creates an attack surface for indirect prompt injection where malicious instructions could be embedded within the files being reviewed.
- Ingestion points: The skill ingests browser-rendered HTML, CSS, JSX, TSX, JavaScript, and TypeScript source files for analysis.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the analyzed code; it refers to an external document for review principles.
- Capability inventory: The agent performing these checks requires read access to the project source files.
- Sanitization: There are no explicit instructions to sanitize or escape the content of the ingested files before the agent processes them.
Audit Metadata