review-hog-validation-criteria
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze code from pull requests, which constitutes untrusted external data. This creates a surface for potential indirect prompt injection where an attacker might attempt to influence the agent's validation verdict by embedding instructions within code comments or metadata.
- Ingestion points: Pull request code and codebase files accessed during the investigation process as described in SKILL.md.
- Boundary markers: No specific delimiters or boundary markers are defined to separate untrusted code content from the agent's core instructions.
- Capability inventory: The skill's primary function is to return a keep/drop verdict; it does not define or request high-risk capabilities such as network access or arbitrary command execution.
- Sanitization: There is no mention of sanitizing, escaping, or filtering instructions that may be present within the analyzed code strings or comments.
Audit Metadata