review-implementation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill acts as a read-only auditor, comparing code changes against thread-specific documentation (
spec.md,plan.md, etc.). - [PROMPT_INJECTION]: The skill processes untrusted data (code diffs and implementation reports), which presents a surface for indirect prompt injection. However, the risk is minimal due to the skill's restricted capabilities and read-only nature.
- Ingestion points: Reads implementation code, diffs,
spec.md,plan.md,decisions.md, andimplementation-report.mdwithin thedocs/threads/directory. - Boundary markers: No specific boundary markers or "ignore instructions" tags are used for the ingested content.
- Capability inventory: Uses the
/emit-pending-reviewtool to write audit findings to the.pending-reviews/directory. It does not have network access or arbitrary command execution privileges. - Sanitization: No explicit sanitization or filtering of the ingested code or reports is performed.
Audit Metadata