code-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via the Bash tool to identify changes in the repository, specifically
git diff --name-only main...HEAD. This is an expected operation for the skill's stated purpose of reviewing code changes. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the codebase being reviewed, which creates a surface for indirect prompt injection.
- Ingestion points: Content from files and file paths retrieved via
Read,Grep,Glob, andgit diffcommands (SKILL.md). - Boundary markers: The skill utilizes a structured 6-aspect review framework and a mandatory 'Chain-of-Verification' protocol to validate findings, providing a logical structure for analysis, although explicit syntax delimiters for ingested code are not defined in the instructions.
- Capability inventory: The skill has access to
Bash,Read,Grep, andGlobtools, enabling it to interact with the local file system and execute shell commands. - Sanitization: No explicit sanitization or escaping of the code content is described before the agent processes it for review.
Audit Metadata