self-review
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted external data in the form of source code and git diffs, creating a surface for indirect prompt injection attacks.
- Ingestion points: User-provided code snippets, project files, and git diff output (SKILL.md).
- Boundary markers: Absent; the instructions do not provide delimiters or specific guidance to treat the code content as data only, increasing the risk that the agent may follow instructions embedded within the code (e.g., in comments).
- Capability inventory: The skill utilizes file system access and git command execution to perform its task.
- Sanitization: Absent; there is no logic to filter or ignore potentially malicious instructions found within the diffs or files being reviewed.
Audit Metadata