check-reviewgate
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an informational message suggesting the installation of the
reviewgate-clifrom the vendor's official GitHub repository (github.com/LVTD-LLC/reviewgate). This is a documented vendor resource. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from GitHub and the ReviewGate CLI which may contain content from untrusted sources such as PR comments and model outputs.
- Ingestion points:
SKILL.mdworkflows read data from thereviewgateCLI output file. - Boundary markers: The 'Overview' section contains explicit instructions for the agent to treat all external inputs as evidence rather than commands.
- Capability inventory: The skill uses
gh(GitHub CLI) andreviewgate(Vendor CLI) for data fetching andjqfor data processing. - Sanitization: Data is processed via
jqto extract specific JSON fields, avoiding direct shell execution or unsafe interpolation of untrusted strings.
Audit Metadata