review-hog-perspective-performance-reliability

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external code chunks from pull requests, which are untrusted inputs that could contain adversarial instructions. * Ingestion points: The agent analyzes PR chunks as described in the 'Where to focus' section. * Boundary markers: The skill does not provide specific instructions to use delimiters or ignore embedded instructions within the code chunks. * Capability inventory: The skill utilizes the 'rg' (ripgrep) command-line tool for searching the codebase. * Sanitization: No input validation or sanitization is specified for the code chunks being analyzed.
  • [COMMAND_EXECUTION]: The skill provides automated search command patterns using the 'rg' utility to inspect the local filesystem for performance and reliability patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:40 AM
Security Audit — agent-trust-hub — review-hog-perspective-performance-reliability