receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes external, potentially untrusted data from GitHub pull request comments, which could theoretically contain instructions designed to influence the agent's behavior.
- Ingestion points: In
SKILL.md, the agent is instructed to fetch feedback usinggh pr view --comments, placing external content directly into the agent's context. - Boundary markers: There are no explicit instructions for the agent to wrap this external content in delimiters or to ignore any embedded instructions found within the comments.
- Capability inventory: The skill allows for the execution of various shell commands such as
npm test,npm run lint, andgit push, as described inSKILL.md. - Sanitization: The instructions do not specify any sanitization or validation steps for the content retrieved from the pull request comments before the agent acts upon it.
Audit Metadata