requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
git rev-parse,git log, andgit diffto determine commit ranges and extract code changes for review. These are standard operations for the tool's intended purpose of code analysis. - [DATA_EXPOSURE]: The agent accesses the local repository's history and source code changes. This access is necessary for performing code reviews and occurs within the local environment without evidence of external exfiltration.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes arbitrary code content from the repository. Malicious instructions embedded in code comments or files could attempt to influence the reviewer agent's assessment, particularly since no explicit boundary markers are used to separate the review instructions from the content being reviewed.
Audit Metadata