review
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
coderabbitandcrcommand-line tools to generate code analysis and feedback. This execution is central to the skill's purpose as a code review assistant. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes external code differences (diffs) that may contain untrusted content.
- Ingestion points: Code changes and branch diffs retrieved and processed by the
coderabbittool (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or instructions to the agent to ignore potentially malicious directions embedded in the code being reviewed.
- Capability inventory: The skill allows the agent to execute the analysis tool and subsequently address issues found in the code (SKILL.md).
- Sanitization: There is no evidence of pre-processing or sanitization of the code data before it is analyzed by the agent.
Audit Metadata