requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No security issues detected. The skill instructions and templates follow best practices for local code review workflows.
- [COMMAND_EXECUTION]: The skill utilizes standard git commands (
git rev-parse,git log,git diff) to facilitate the code review process. These commands are used locally to identify and compare commit history. - [PROMPT_INJECTION]: The skill is designed to ingest and review code diffs, which creates a surface for indirect prompt injection if the code being reviewed contains malicious instructions.
- Ingestion points:
git diffoutput is ingested into thecode-reviewer.mdtemplate. - Boundary markers: None present; the code diff is directly inserted into the prompt template.
- Capability inventory: Shell execution via
gitis the primary capability. - Sanitization: None; the skill assumes the code is safe to read for review purposes.
Audit Metadata