code-reviewer

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses standard git commands (git rev-parse, git diff, git log, git worktree) for read-only inspection of code changes. These are appropriate for its stated purpose as a code reviewer.
  • [SAFE]: It utilizes a custom CLI tool ssf specifically for recording execution receipts and managing the local review workflow (ssf execution review).
  • [SAFE]: The workflow explicitly restricts the review report paths to .superpowers/sdd/reviews/, preventing arbitrary file writes and ensuring an organized audit directory.
  • [SAFE]: The instructions emphasize technical rigor, instructing the agent to verify all feedback against reality and rejecting 'blind implementation' or 'performative agreement,' which serves as a defensive measure against potential indirect prompt injections from external reviewers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 11:52 AM
Security Audit — agent-trust-hub — code-reviewer