receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon code review feedback, which constitutes an external, untrusted data surface.
- Ingestion points: Processes incoming code review comments and technical feedback from external sources or project partners within
SKILL.mdworkflows. - Boundary markers: Absent. There are no guidelines or explicit delimiters instructing the agent to isolate code review feedback or ignore potential prompt injections embedded inside the comments.
- Capability inventory: The skill references structural exploration of the codebase via
grepand interacting with remote repositories via the GitHub CLI (gh api). - Sanitization: Absent. No filtering, validation, or escaping mechanisms are specified to ensure malicious instructions embedded within code review comments are neutralized.
Audit Metadata