vet-feedback
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed entirely of markdown documentation and a JSON evaluation file. There are no executable scripts, binaries, or automated tasks associated with the skill files.
- [SAFE]: The content does not include any base64 encoding, homoglyphs, zero-width characters, or other obfuscation techniques. All instructions are in plain text.
- [SAFE]: No sensitive file paths (e.g., .ssh, .aws, .env) or hardcoded credentials were found. There are no network operations (curl, wget, fetch) or remote code download patterns.
- [PROMPT_INJECTION]: The skill's primary function is to process untrusted external data in the form of pull request comments or reviewer feedback. This represents an indirect prompt injection surface. However, the skill explicitly mitigates this risk by requiring the agent to 'PROVE CLAIM' each item against the actual codebase and perform an 'EVALUATE' step before implementation, preventing blind obedience to malicious instructions hidden in feedback.
Audit Metadata