receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains instructional content and behavioral protocols for managing code review feedback without providing any executable scripts, remote dependencies, or configuration files.- [COMMAND_EXECUTION]: The instructions describe the use of the
grepcommand to search the codebase for feature usage as part of a 'YAGNI' (You Ain't Gonna Need It) check. This is a standard read-only developmental operation used for verifying technical requirements.- [PROMPT_INJECTION]: The skill processes data from external reviewers, creating a surface for indirect prompt injection. Ingestion points: Feedback from external sources. Boundary markers: No explicit data delimiters are defined, though the skill mandates a skepticism-first behavioral approach ('be skeptical, but check carefully'). Capability inventory: Employsgrepfor code analysis and implies the ability to modify local code files. Sanitization: No explicit sanitization or filtering of input data is mentioned. The skill's primary focus is providing a defensive layer against blindly following external instructions.
Audit Metadata