test-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a static analyzer for test suites. It utilizes the
Read,Grep,Glob, andBashtools exclusively for standard development workflows, such as checkinggit statusand reading source files. - [INDIRECT_PROMPT_INJECTION]: The skill represents an indirect prompt injection surface because it processes untrusted source code and test files. However, it specifically notes that it performs static analysis only and does not execute the tests, which mitigates risks of remote code execution during the review process.
- Ingestion points: Reads code and test files via the
Readtool. - Boundary markers: None explicitly defined in instructions.
- Capability inventory: Uses
Bash(restricted to git commands in instructions),Read,Grep, andGlobtools. - Sanitization: Not explicitly mentioned, but behavior is restricted to generating a static review report.
Audit Metadata