review-hog-perspective-logic-correctness

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted code chunks from pull requests, which presents a surface for indirect prompt injection.
  • Ingestion points: PR chunks are processed as part of the Logic & Correctness review flow (SKILL.md).
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands within the analyzed code are provided.
  • Capability inventory: The skill uses rg (ripgrep) to search through codebase files.
  • Sanitization: There are no explicit instructions for sanitizing or escaping content extracted from the code chunks before the agent processes them.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 07:58 PM