matematic-patron-pr-review-pl

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted external data (PR diffs and git history) which could contain adversarial instructions embedded in code comments or metadata. * Ingestion points: Code diffs retrieved via gh pr diff, gh pr view, and git diff executed through the Bash tool. * Boundary markers: Absent; the instructions do not define specific delimiters to isolate external diff content from agent instructions. * Capability inventory: Access to Bash for running repository search tools (rg), version control commands (git), and GitHub CLI (gh). * Sanitization: Absent; the agent is instructed to read raw diff content directly as the source of truth.
  • [SAFE]: The skill implements strong defensive rules to detect PII exposure, hardcoded secrets, and multi-tenant authorization flaws within the reviewed code.
  • [SAFE]: No obfuscation, persistence mechanisms, or unauthorized remote code downloads were detected.
  • [SAFE]: All external repository references point to the vendor's own infrastructure (matematicsolutions) or well-known public repositories used for structural patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:31 PM
Security Audit — agent-trust-hub — matematic-patron-pr-review-pl