partitioned-review-fix-loop
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted code changes from branches and pull requests, which could contain instructions intended to influence the agent's behavior during the review process.
- Ingestion points: Reads the full repository review target, base, and working-tree change sets as described in SKILL.md.
- Boundary markers: The instructions include a specific 'Reviewer prompt skeleton' that explicitly constrains the agent to report only P0/P1 defects and ignore style, cleanup, or pre-existing issues.
- Capability inventory: The orchestrator spawns subagents, accesses the entire repository for reading, and writes a persistent ledger to .notes/PARTITIONED_REVIEW_FIX_LOOP_LOG.md.
- Sanitization: The workflow requires subagents to use the $code-review skill and return structured JSON output, which helps mitigate risks associated with unstructured data processing.
Audit Metadata