review-hog-perspective-performance-reliability
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
ripgrep(rg) to search for code patterns such as loops containing queries, error handling blocks, and timeout configurations. These commands are scoped to the local repository for analysis purposes. - [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection as it is designed to ingest and process untrusted external data in the form of pull request code chunks.
- Ingestion points: PR chunks analyzed by the agent (identified in SKILL.md).
- Boundary markers: Absent; the instructions do not specify delimiters or guidelines for the agent to ignore instructions embedded within the code chunks.
- Capability inventory: The agent uses searching tools (
rg) but does not have requested access to file writing or external network operations in this skill. - Sanitization: No validation or sanitization of the PR content is defined in the instructions.
Audit Metadata