odoo-code-review
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for performing static analysis and code review of Odoo modules. It correctly identifies security and performance risks, such as SQL injection prevention, safe ORM usage, and avoiding direct transaction commits, as high-priority concerns.- [PROMPT_INJECTION]: As a code review tool, the skill is designed to ingest and analyze untrusted external data such as Odoo addon source code and git diffs. This function creates a surface for indirect prompt injection if an attacker embeds malicious instructions within the reviewed code.
- Ingestion points: Odoo module files (models, views, controllers), git diffs, and pull request content.
- Boundary markers: The instructions do not explicitly direct the agent to wrap external content in delimiters or use 'ignore embedded instructions' warnings.
- Capability inventory: The skill facilitates reading and analyzing local source code and framework files.
- Sanitization: The skill does not mention specific sanitization or escaping of the ingested code content before analysis.
Audit Metadata