review-code-smells
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is focused on software quality review and documentation. All associated utility scripts use only standard Python libraries and are intended for local data processing related to benchmarking.
- [PROMPT_INJECTION]: The skill analyzes user-provided source code, which introduces a potential surface for indirect prompt injection if the source material contains instructions for the agent.
- Ingestion points: User-provided code files are processed by the agent according to the workflow.
- Boundary markers: No specific delimiters or 'ignore' instructions are defined for the analyzed code.
- Capability inventory: Includes local file read/write for benchmark processing; no network or unauthorized shell execution capabilities are present.
- Sanitization: No validation or sanitization of analyzed content is performed.
Audit Metadata