code-review
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local git commands including
git diff,git log, andgit rev-parse. These are used to retrieve the code changes and commit history necessary for the code review process. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from git diffs, commit messages, and external issue trackers.
- Ingestion points: The agent reads the output of
git diff,git log, and content from external sources defined indocs/agents/issue-tracker.mdand local spec files. - Boundary markers: The instructions do not define specific delimiters or warnings to treat the content of the diff or issue tracker as untrusted data that should not be followed as instructions.
- Capability inventory: The skill is limited to reading files, running local git commands, and generating analytical reports. It does not perform network operations or write to sensitive system files.
- Sanitization: There is no evidence of sanitization, filtering, or escaping of the content ingested from code diffs or issue tracking documentation.
Audit Metadata