rust-code-reviewer
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard local version control tools including
git status,git diff --stat,git log, andgit diffto identify and analyze code changes (SKILL.md). These are legitimate operations for the skill's primary purpose of code review. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest and process untrusted external data in the form of Rust source code and git diffs (SKILL.md).
- Ingestion points: Untrusted data enters the agent context through file reading and git output analysis.
- Boundary markers: Not explicitly defined in the instructions.
- Capability inventory: The skill can execute git commands and invoke other specialized sub-skills for domain-specific analysis.
- Sanitization: No specific sanitization or escaping of ingested code content is mentioned. This surface is inherent to the nature of a code review tool and is considered a low-risk architectural observation rather than a malicious finding.
Audit Metadata