python-code-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from several sources, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads Python scripts from
workspace/code/python/, method plans fromworkspace/problem/method-selector/method_plan.json, and data reports fromworkspace/data/data_report.md. - Boundary markers: No explicit delimiters or boundary markers are defined to separate the data being reviewed from the agent's instructions.
- Capability inventory: The skill is authorized to perform surgical code fixes (writing to
.pyfiles) and generate mandatory review reports. - Sanitization: There are no specified sanitization or validation procedures for the ingested content before it is processed or written to outputs.
Audit Metadata