code-review-and-quality
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted external data, specifically code diffs and pull request content.
- Ingestion points: Code snippets, diff outputs, and pull request descriptions (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or guardrails to prevent the agent from obeying instructions hidden within code comments or strings in the analyzed files.
- Capability inventory: This skill does not define any script execution or tool usage in its frontmatter, which significantly limits the impact of potential injections.
- Sanitization: No input sanitization or validation steps are defined for the data being processed.
Audit Metadata