review-remediation
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted PR feedback to drive automated remediation.
- Ingestion points: The skill gathers claims and requested changes from human comments, bot findings, and security alerts (SKILL.md).
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the feedback.
- Capability inventory: The skill has broad capabilities including investigation, code fixes, and the authority to 'commit, push, and publication' changes.
- Sanitization: No sanitization or content validation steps are mentioned for the feedback being processed.
Audit Metadata