receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill represents an indirect prompt injection surface because it processes feedback from 'External Reviewers', which constitutes untrusted external data that can influence the agent's actions.\n
- Ingestion points: Feedback from external reviewers provided in pull request comments or other review formats (SKILL.md).\n
- Boundary markers: The skill establishes behavioral boundaries by instructing the agent to 'Verify before implementing', 'be skeptical', and check if the 'reviewer understands full context'.\n
- Capability inventory: The agent is instructed to use
grepfor codebase searches,gh apifor responding to GitHub reviews, and performs file modifications during implementation (SKILL.md).\n - Sanitization: The process relies on the agent's own technical evaluation and manual verification against the codebase reality rather than automated input sanitization or structural validation.
Audit Metadata