solid-review
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external source code and pull requests, which serves as a potential vector for indirect prompt injection if the ingested content contains malicious instructions.
- Ingestion points: Source code, pull request diffs, and repository files as described in the workflow (SKILL.md).
- Boundary markers: While the skill emphasizes evidence-based review, it does not explicitly instruct the agent to use delimiters or specific safety warnings for the code being analyzed.
- Capability inventory: The agent is instructed to use filesystem access, code search tools (ripgrep), language servers, and test runners (SKILL.md, references/refactoring-and-language.md).
- Sanitization: No specific instructions for sanitizing or escaping the content of analyzed files are provided.
Audit Metadata