security-review
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of documentation and process guidelines for human or AI agents to follow when performing security reviews. It does not execute commands, access the network, or manage credentials.
- [SAFE]: The referenced file
references/language-quirks.mdprovides standard security knowledge regarding common vulnerabilities (sinks) in Python, JavaScript, Java, Go, and Ruby. These are for reference only and are not executed. - [SAFE]: The skill correctly encourages the use of established security tools like Semgrep or CodeQL if they are already present in a repository, rather than attempting to download or install new ones.
- [SAFE]: Instructions focus on 'semantic data-flow review' and 'trace taint flow,' which are industry-standard practices for identifying reachability in security findings.
Audit Metadata