multi-perspective-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git diff --name-onlyto identify changed files andgit rev-parse --abbrev-ref HEADto derive review identifiers from the current branch.- [DYNAMIC_EXECUTION]: The skill executes a local Python scriptgen_run_stamp.pyusinguv runto generate unique, collision-resistant identifiers. It also dynamically spawns sub-agents via theAgent()interface with task-specific instructions to claim and execute tasks within a SAM plan.- [INDIRECT_PROMPT_INJECTION]: The skill processes code diffs which constitute untrusted data. It implements strong architectural mitigations: - Ingestion points:
git diffoutput is used for file listing and as the target for sub-agent reviews. - Boundary markers: Review tasks are isolated within a structured SAM plan, with results written to specific task sections.
- Capability inventory: Access is restricted to
gitcommands and MCP-based plan operations. - Sanitization: The skill performs sanitization of branch names and enforces strict reconciliation checks (Check 6 and Check 7) to verify that the final synthesized punch list accurately reflects the raw verdicts from the security, performance, quality, and accessibility reviewers.
Audit Metadata