requesting-code-review

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands including git rev-parse, git log, and git diff to determine commit ranges and extract code changes for review. These are standard operations for the tool's intended purpose of code analysis.
  • [DATA_EXPOSURE]: The agent accesses the local repository's history and source code changes. This access is necessary for performing code reviews and occurs within the local environment without evidence of external exfiltration.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes arbitrary code content from the repository. Malicious instructions embedded in code comments or files could attempt to influence the reviewer agent's assessment, particularly since no explicit boundary markers are used to separate the review instructions from the content being reviewed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 12:50 PM
Security Audit — agent-trust-hub — requesting-code-review