code-reviewer
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from pull request descriptions and source code files during its workflow. It lacks explicit boundary markers or sanitization logic to prevent the agent from being influenced by instructions embedded within the analyzed content.
- Ingestion points: The skill processes pull request descriptions (Workflow Step 1) and source code files (Workflow Step 3) in SKILL.md.
- Boundary markers: No delimiters or 'ignore embedded instructions' warnings are present in the core workflow instructions.
- Capability inventory: The skill uses
Read,Grep, andGlobtools to interact with the file system. - Sanitization: No evidence of escaping or filtering external content before processing or interpolation into agent prompts.
Audit Metadata