backend-code-review
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions specifically include security guidelines to check for common vulnerabilities like SQL injection, SSRF, and hardcoded secrets, demonstrating a defensive design.
- [PROMPT_INJECTION]: The skill is designed to analyze untrusted external data in the form of code snippets and files, which serves as an indirect prompt injection surface.
- Ingestion points: Python code snippets provided in chat or files located in the
api/directory. - Boundary markers: The skill does not define specific delimiters to isolate user-provided code from the system instructions.
- Capability inventory: The skill produces text-based analysis and does not have access to tools for code execution, network requests, or file system modifications.
- Sanitization: There is no explicit logic to sanitize or filter potential instructions embedded within the reviewed code.
Audit Metadata