audit-review
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands (
git rev-parse,git log,git diff) to identify code changes and retrieve diffs for analysis. These are standard operations for a code review tool. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data in the form of code changes through
git diffoutput. - Ingestion points: Code diffs are retrieved via
git diffcommands as specified inthe-inspector-prompt.md. - Boundary markers: The prompt template uses markdown sections to organize content, but lacks specific delimiters or guardrails to prevent the agent from interpreting instructions embedded within the code being reviewed.
- Capability inventory: The skill executes git-related shell commands and dispatches subagents to perform reviews.
- Sanitization: No explicit sanitization or escaping mechanisms for the analyzed diff content are present in the provided instructions.
Audit Metadata