api-surface-review
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions and guidelines for performing code reviews. It does not include any executable scripts, shell commands, or remote dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of code diffs from potentially external contributors. This creates a surface where an attacker could attempt to embed instructions within code comments or docstrings to influence the agent's review verdict. However, the risk is negligible as the skill only generates textual feedback and does not possess capabilities to perform sensitive operations or execute the code being reviewed.
Audit Metadata