code-review
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow for processing untrusted external data, which creates a surface for indirect prompt injection attacks.
- Ingestion points: As described in SKILL.md, the agent ingests data from pull requests, diffs, branch references, and PR descriptions.
- Boundary markers: The instructions do not define delimiters or markers (e.g., XML tags or specific 'ignore' blocks) to separate external data from the agent's core instructions.
- Capability inventory: An agent using this skill is expected to read files and surrounding context, which could be exploited if malicious instructions in a diff are obeyed.
- Sanitization: No steps for sanitizing or validating the input data are mentioned in the workflow.
Audit Metadata