review
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: This skill involves the processing of untrusted code diffs, which creates a surface for indirect prompt injection. Malicious instructions could be embedded within the reviewed content to influence the agent's judgment or behavior.
- Ingestion points: Untrusted diff data is processed during the review loop (SKILL.md).
- Boundary markers: Absent; there are no instructions to use delimiters or to ignore instructions embedded within the diff content.
- Capability inventory: The skill does not define any dangerous tools, network operations, or shell execution capabilities.
- Sanitization: Absent; the skill does not specify any validation or sanitization of the input diffs.
Audit Metadata