receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is primarily a set of behavioral guidelines for code review reception. It does not contain any malicious patterns such as prompt injection, obfuscation, or persistence mechanisms.
- [COMMAND_EXECUTION]: The skill mentions the use of standard development tools like
grepfor searching the codebase andgh apifor interacting with GitHub Pull Request comments. These operations are within the expected scope of a coding assistant skill. - [SAFE]: The skill explicitly includes defensive logic when processing feedback from 'External Reviewers', instructing the agent to verify suggestions for technical correctness and potential regressions before implementation. This serves as a mitigation against indirect prompt injection from external sources.
Audit Metadata