review-hog-perspective-logic-correctness

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides example rg (ripgrep) commands for the agent to locate specific code patterns (e.g., calculations, queries, state mutations). These are standard investigative tools for a code review agent and do not involve unsafe parameters or arbitrary execution.
  • [INDIRECT_PROMPT_INJECTION]: As a code review tool, this skill is intended to process external data in the form of pull request (PR) chunks.
  • Ingestion points: Processes code chunks from PRs within the SKILL.md instructions.
  • Boundary markers: The instructions do not specify explicit delimiters for the code being reviewed.
  • Capability inventory: The agent uses rg for file searching and provides natural language feedback.
  • Sanitization: No explicit sanitization or validation of the PR content is mentioned; the skill assumes the agent will interpret the code blocks as data to be analyzed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 10:10 AM
Security Audit — agent-trust-hub — review-hog-perspective-logic-correctness