code-review-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves analyzing external, potentially untrusted source code, which creates a surface for indirect prompt injection attacks.
- Ingestion points: Code changes, pull requests, and audit targets as described in the "When to Use This Skill" section of SKILL.md.
- Boundary markers: There are no instructions provided to the agent to treat reviewed code as data rather than instructions, nor are there delimiters to separate the checklist from the code content.
- Capability inventory: The skill is intended for use in environments where agents have file-reading capabilities and may execute linting or testing tools via a shell.
- Sanitization: No guidance is provided for sanitizing or escaping the content of the files being reviewed before they are ingested into the agent context.
Audit Metadata