review
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external codebase content, which presents a risk of indirect prompt injection if the files being reviewed contain malicious instructions intended to manipulate the agent's behavior.
- Ingestion points: Files, directories, or components passed as the
[target]argument to the/reviewcommand (SKILL.md). - Boundary markers: The instructions do not define clear boundaries or provide warnings to the agent to distinguish between the skill's instructions and the content of the files being reviewed.
- Capability inventory: The skill allows the agent to read local files and supports writing analysis results to the local filesystem via the
--exportargument (SKILL.md). - Sanitization: No evidence of sanitization or filtering of the input file content before it is processed by the agent.
Audit Metadata