code-review
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of natural language guidelines for code review and does not include any executable code, shell commands, or network operations. It strictly provides behavioral instructions for the AI agent.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted external data, such as code diffs and pull request comments, which is an inherent part of the code review process.
- Ingestion points: SKILL.md (directs the agent to read diffs, AGENTS.md, CONTRIBUTING.md, and prior review threads).
- Boundary markers: None are explicitly defined in the instructions to distinguish between the code being reviewed and potential instructions within that code.
- Capability inventory: The skill does not possess capabilities for subprocess execution, file modification, or network requests.
- Sanitization: No specific sanitization or filtering of external content is mentioned.
Audit Metadata