skills/matematicsolutions/awesome-matematic-skills-pl/matematic-patron-pr-review-pl/Gen Agent Trust Hub
matematic-patron-pr-review-pl
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (PR diffs and git history) which could contain adversarial instructions embedded in code comments or metadata. * Ingestion points: Code diffs retrieved via
gh pr diff,gh pr view, andgit diffexecuted through theBashtool. * Boundary markers: Absent; the instructions do not define specific delimiters to isolate external diff content from agent instructions. * Capability inventory: Access toBashfor running repository search tools (rg), version control commands (git), and GitHub CLI (gh). * Sanitization: Absent; the agent is instructed to read raw diff content directly as the source of truth. - [SAFE]: The skill implements strong defensive rules to detect PII exposure, hardcoded secrets, and multi-tenant authorization flaws within the reviewed code.
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized remote code downloads were detected.
- [SAFE]: All external repository references point to the vendor's own infrastructure (matematicsolutions) or well-known public repositories used for structural patterns.
Audit Metadata