task-review
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted natural language tasks and source code, which provides a susceptibility surface for indirect prompt injection.
- Ingestion points: Ingests external natural language task descriptions and various code artifacts such as git diffs, specific files, and commit ranges as summarized in the input section of SKILL.md.
- Boundary markers: The instructions do not define any explicit boundary markers, delimiters, or specific instructions for the agent to disregard potential commands embedded within the reviewed code or task text.
- Capability inventory: The skill's risk is mitigated by its strictly read-only nature; the instructions explicitly prohibit the agent from modifying code, documents, submitting changes, or approving fixes.
- Sanitization: There are no requirements or mechanisms specified for sanitizing or validating the ingested content prior to analysis.
Audit Metadata