code-review

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local git commands (git rev-parse, git diff, git ls-files) to determine the scope of a code review pass. These commands are standard for repository management and do not involve remote network calls.\n- [COMMAND_EXECUTION]: The skill's verification process executes local development tools, including formatters, linters, and test suites. This is a functional requirement for validating code changes and is limited to the local execution environment.\n- [PROMPT_INJECTION]: The skill is designed to process untrusted code from external sources, presenting an inherent surface for indirect prompt injection via code comments or string literals. The skill mitigates this by using a strictly defined output schema and domain-specific review profiles that focus the agent's attention on analysis rather than instruction following.\n- [SAFE]: The included bash script scripts/validate-references.sh is a benign utility for validating internal file references and adheres to safe shell scripting practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 01:41 PM