review-hog-perspective-performance-reliability
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes pull request code chunks, which are untrusted external data. This establishes a surface where malicious instructions embedded in comments or strings within the code could attempt to influence the agent's review behavior.
- Ingestion points: PR code chunks provided for analysis.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts in the analyzed content.
- Capability inventory: The skill utilizes the
rg(ripgrep) tool to search the codebase and provides feedback on performance and reliability findings. - Sanitization: There is no evidence of sanitization or filtering applied to the code chunks before processing.
Audit Metadata