code-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard git commands (
git rev-parse,git diff,git log,git worktree) for read-only inspection of code changes. These are appropriate for its stated purpose as a code reviewer. - [SAFE]: It utilizes a custom CLI tool
ssfspecifically for recording execution receipts and managing the local review workflow (ssf execution review). - [SAFE]: The workflow explicitly restricts the review report paths to
.superpowers/sdd/reviews/, preventing arbitrary file writes and ensuring an organized audit directory. - [SAFE]: The instructions emphasize technical rigor, instructing the agent to verify all feedback against reality and rejecting 'blind implementation' or 'performative agreement,' which serves as a defensive measure against potential indirect prompt injections from external reviewers.
Audit Metadata