review-fix-loop
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill performs legitimate developer-oriented tasks such as code analysis and automated fixing within the user's local environment.
- [COMMAND_EXECUTION]: The skill triggers verification commands sourced from local project instructions to validate fixes. This is an expected functional requirement for a development automation tool and is constrained to the workspace.
- [PROMPT_INJECTION]: The skill processes code changes from potentially untrusted sources like Pull Requests, which creates an indirect prompt injection surface. This is evaluated as safe as it is central to the tool's intended purpose and uses structured communication between agents. Ingestion points: Targets local uncommitted changes, staged changes, branch diffs, and Pull Requests. Boundary markers: The orchestration logic requires subagents to return results in a structured JSON format to separate data from instructions. Capability inventory: The agent integrates file changes and executes local shell commands for project verification. Sanitization: No specific filtering or sanitization of the code content is implemented.
Audit Metadata