code-review-csharp
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted C# source code provided by users. It does not include specific instructions to the AI to ignore any potentially malicious prompts embedded within comments or strings in that source code. This represents a theoretical surface for indirect prompt injection, although the impact is minimal as the skill has no access to sensitive tools, network resources, or persistent storage.\n
- Ingestion points: C# files, classes, or code snippets provided by the user or identified in the project environment, as described in
SKILL.mdunder the 'Gather Context' section.\n - Boundary markers: The instructions do not define specific delimiters for the untrusted code or provide a warning to ignore instructions contained within the analyzed content.\n
- Capability inventory: The skill produces a Markdown report and does not utilize subprocesses, file writes, or network tools.\n
- Sanitization: The skill lacks validation or sanitization steps for the input code before it is processed by the AI.
Audit Metadata