dual-axis-skill-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The core script
scripts/run_dual_axis_review.pyusessubprocess.runto executepytestusing eitheruv runor the system Python interpreter. This is used to verify the test health of the skills being reviewed and is controlled by the--skip-testsflag. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow to generate an LLM review prompt (
build_llm_prompt) by ingesting instructions and code from other skills in a specified--project-root. - Ingestion points: Files located in
skills/*/SKILL.mdandscripts/*.pywithin the target project. - Boundary markers: The generated prompt wraps external content in markdown code blocks and bulleted lists to differentiate it from instructions.
- Capability inventory: File system read/write (reports), and subprocess execution (pytest).
- Sanitization: Content is interpolated into markdown templates without specific escaping, relying on code block delimiters.
- [DYNAMIC_EXECUTION]: The test utility
scripts/tests/conftest.pyusesimportlib.utilto dynamically loadrun_dual_axis_review.pyinto the test environment. This is a standard Python practice for testing standalone scripts that are not part of a formal package.
Audit Metadata