zephyr-patch-review
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to create and execute local Bash and Python scripts for testing, debugging, and diagnostic purposes. These activities are confined to a specific
.zephyr-skills/directory to maintain workspace cleanliness and prevent unintended modifications to the build environment. - [PROMPT_INJECTION]: As a code review tool, the skill naturally processes untrusted external data in the form of patches and pull request metadata. This presents a potential surface for indirect prompt injection, which is mitigated by the skill's specific focus on source-backed findings and technical verification.
- Ingestion points: Processes external patch files, git diffs, and Gerrit/GitHub pull request data.
- Boundary markers: No specific delimiters are defined for isolating external data, though the workflow emphasizes evidence-based reporting.
- Capability inventory: The skill utilizes file system writes for audit logs, script execution for verification, and Git commands for history analysis.
- Sanitization: The skill relies on the agent to interpret code semantically and does not specify automated sanitization of patch content.
Audit Metadata