kotlin-reviewer
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by processing untrusted data (git diffs) that may contain malicious instructions.
- Ingestion points: Untrusted code enters the context through 'git diff' and 'git log' commands as specified in SKILL.md.
- Boundary markers: The prompt lacks explicit delimiters or instructions to ignore embedded commands within the code being analyzed.
- Capability inventory: The skill uses subprocess calls to run git commands and outputs feedback to the user.
- Sanitization: No sanitization or escaping of the external code content is performed before analysis.
Audit Metadata