code-review
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to process and analyze pull request diffs and repository content. Because this data can originate from external sources, it represents a potential surface for indirect prompt injection where malicious instructions could be embedded in the code or comments being reviewed.\n
- Ingestion points: Pull request diffs and repository files (e.g., SKILL.md mentions packages, tests, and configuration files).\n
- Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore instructions embedded within the analyzed code.\n
- Capability inventory: The skill's primary function is analysis and generating review comments; it does not specify capabilities for network access or arbitrary file writes.\n
- Sanitization: There are no explicit instructions for sanitizing or validating the content of the diffs before processing.
Audit Metadata