code-review-dangerous-sinks
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a static reference guide for security auditing and does not include any executable scripts or dynamic logic.
- [SAFE]: Hardcoded patterns for secrets (e.g., 'password=', 'api_key=') are provided strictly as search targets for grep-based auditing and do not constitute credential exposure.
- [SAFE]: The skill recommends standard security tools (ripgrep, semgrep) for pattern matching, which is consistent with its stated purpose of assisting in code review.
Audit Metadata