ai-generated-ut-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves analyzing AI-generated code and test reports. This ingestion of external data constitutes a surface for indirect prompt injection, where malicious instructions could be embedded within the code or reports being reviewed.
- Ingestion points: External unit test code and coverage reports processed during the review workflow (SKILL.md).
- Boundary markers: The instructions do not specify technical delimiters to isolate the code under review from the agent's primary instructions.
- Capability inventory: No high-risk capabilities (shell access, network operations, file writing) are requested or used by the skill instructions.
- Sanitization: No explicit input sanitization or validation logic is defined in the instructions.
Audit Metadata