security-review
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze untrusted external content such as design documents, code diffs, and feature descriptions provided by the user.
- Ingestion points: Untrusted data enters the agent context via the 'What's under review' input section in
SKILL.md. - Boundary markers: The skill does not explicitly define delimiters or specific instructions for the agent to ignore potentially adversarial commands embedded within the code or designs being reviewed.
- Capability inventory: The skill is intended to be used in environments where the agent has tools to read files and analyze codebases.
- Sanitization: There are no instructions to sanitize or escape the input content before processing, which is standard for an instructional security-review skill but constitutes a minor vulnerability surface.
Audit Metadata