receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and act upon feedback from external reviewers, which constitutes a surface for indirect prompt injection attacks.
- Ingestion points: External feedback provided during the code review process (SKILL.md).
- Boundary markers: No explicit markers or delimiters are defined to isolate untrusted feedback from the agent's core instructions.
- Capability inventory: The agent is instructed to use
gh apito post replies to GitHub comments andgrepto search the codebase (SKILL.md). - Sanitization: The instructions lack explicit sanitization or validation of the input strings before they are used in the agent's workflow.
Audit Metadata