requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local
gitcommands (includinggit rev-parse,git log, andgit diff) to retrieve commit hashes and generate diffs for the review process. These operations are restricted to the local repository context. - [SAFE]: Analysis of indirect prompt injection surfaces:
- Ingestion points: Implementation descriptions and project plans are ingested via placeholders (e.g.,
{DESCRIPTION},{PLAN_REFERENCE}) incode-reviewer.md. - Boundary markers: Absent; the template does not use explicit delimiters to isolate untrusted content.
- Capability inventory: Shell execution of
gitcommands as defined inSKILL.mdandcode-reviewer.md. - Sanitization: No sanitization or validation of the input fields is performed. This ingestion surface is consistent with the skill's primary purpose and is managed by standard agent instructions provided in the template.
Audit Metadata