code-review
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution Considerations: The skill utilizes shell commands to run
pytest,ruff, and a bundledlint_check.pyscript. This is standard functionality for automated code validation within a development environment.\n- Indirect Prompt Injection Surface: The skill analyzes external source code files. This creates a potential ingestion point where instructions embedded in code could influence the agent's behavior. Ingestion points: File reading described inSKILL.md. Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard embedded commands. Capability inventory: Local command execution via theexecutetool. Sanitization: No filtering or escaping is applied to the reviewed code. This is an inherent consideration for skills that process and analyze external source files.
Audit Metadata