code-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process untrusted data in the form of code changes (git diffs). This creates a vulnerability surface for indirect prompt injection if the code under review contains malicious instructions intended to manipulate the agent's output.
- Ingestion points: Processes (staged) git diffs and changes compared to the main branch (SKILL.md).
- Boundary markers: Absent; the instructions do not specify delimiters or techniques to isolate code content from the agent's instructions.
- Capability inventory: The skill focus is limited to inspection and reporting; it does not invoke network operations, file system writes, or subprocess execution (SKILL.md).
- Sanitization: Absent; the skill does not describe any validation or escaping of the ingested code content.
Audit Metadata