code-review
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions.
- Ingestion points: Data enters the agent context through the execution of
gh pr diff,git diff, and the reading of specification files indocs/specs/(SKILL.md). - Boundary markers: There are no explicit instructions or delimiters defined to ensure the agent treats the fetched diff content strictly as data rather than instructions.
- Capability inventory: The agent is granted the capability to submit reviews and approvals via
gh pr review, which could be exploited if the agent is tricked by instructions embedded in the code it is reviewing (SKILL.md). - Sanitization: No sanitization or validation logic is present to filter out potential prompt injection strings within the diff or spec files.
Audit Metadata