code-review
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: References a remote installation script for the
gfreviewCLI tool hosted on the author's GitHub repository. - [REMOTE_CODE_EXECUTION]: Provides instructions to install a required dependency using a piped shell script (
curl | bash). This is presented to the user as a manual installation step if the tool is missing and is a resource owned by the skill author. - [COMMAND_EXECUTION]: Executes shell commands for
git,gh, andgfreviewto retrieve code diffs, manage branches, and post review comments. - [DATA_EXFILTRATION]: Transmits code snippets and diffs to external AI models (including minimax-m2.5, kimi-k2.5, and glm-5) to perform various analysis phases (Triage, Architect, Challenge).
- [PROMPT_INJECTION]: The skill processes untrusted code diffs through multiple LLM subagents, creating a surface for indirect prompt injection.
- Ingestion points: Data is ingested via
git diffandgfreview diffcommands inreferences/rq.md. - Boundary markers: Uses markdown code blocks to wrap untrusted content in prompts found in
references/reviewers.md. - Capability inventory: The skill has the capability to write to the filesystem (applying fixes) and interact with external repository APIs via
gfreview(as described inreferences/rs.md). - Sanitization: No specific content filtering or instructions to ignore embedded commands are present in the provided prompts.
Audit Metadata