code-review
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon code review feedback from 'External Reviewers', which is an untrusted data source that could contain malicious instructions or misleading code suggestions.
- Ingestion points: External feedback received during the code review cycle as described in Part 2 of
SKILL.md. - Boundary markers: The skill explicitly defines a '6-Step Response Pattern' which acts as a manual boundary, requiring the agent to restate, verify, and evaluate feedback before implementation.
- Capability inventory: The skill utilizes
gitfor diffing andgh(GitHub CLI) for API interactions, along with the ability to dispatch subagents. - Sanitization: Implementation is gated by technical verification ('Check against codebase reality') and skepticism protocols for external feedback, reducing the likelihood of accidental execution of injected instructions.
- [COMMAND_EXECUTION]: The skill uses local shell commands to facilitate the review process.
- Evidence includes
git rev-parse,git diff, andgh apicalls inSKILL.mdandcode-reviewer.md. - These commands are used for retrieving commit SHAs and repository metadata, which are standard development operations.
Audit Metadata