review-hog-perspective-performance-reliability
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill specifies the use of the
rg(ripgrep) command-line utility to search the codebase for specific patterns, such as database queries within loops, error handling blocks, and asynchronous operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code provided in Pull Requests (PR chunks). This creates an attack surface where instructions embedded within the reviewed code could potentially influence the agent's logic or reporting.
- Ingestion points: Pull Request code chunks processed during the review workflow (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded in the analyzed code.
- Capability inventory: The skill has the ability to execute shell-based search commands (
rg) to inspect files (SKILL.md). - Sanitization: There is no evidence of sanitization, filtering, or escaping applied to the content of the code chunks before they are analyzed by the agent.
Audit Metadata